Matthias Fischer dbd7bafb4d suricata: Update to 6.0.13 ...

Excerpt from changelog:

"6.0.13 -- 2023-06-15

Security #6119: datasets: absolute path in rules can overwrite arbitrary files (6.0.x backport)
Bug #6138: Decode-events of IPv6 packets are not triggered (6.0.x backport)
Bug #6136: suricata-update: dump-sample-configs: configuration files not found (6.0.x backport)
Bug #6125: http2: cpu overconsumption in rust moving/memcpy in http2_parse_headers_blocks (6.0.x backport)
Bug #6113: ips: txs still logged for dropped flow (6.0.x backport)
Bug #6056: smtp: long line discard logic should be separate for server and client (6.0.x backport)
Bug #6055: ftp:  long line discard logic should be separate for server and client (6.0.x backport)
Bug #5990: smtp: any command post a long command gets skipped (6.0.x backport)
Bug #5982: smtp: Long DATA line post boundary is capped at 4k Bytes (6.0.x backport)
Bug #5809: smb: convert transaction list to vecdeque (6.0.x backport)
Bug #5604: counters: tcp.syn, tcp.synack, tcp.rst depend on flow (6.0.x backport)
Bug #5550: dns: allow dns messages with invalid opcodes (6.0.x backport)
Task #5984: libhtp 0.5.44 (6.0.x backport)
Documentation #6134: userguide: add instructions/explanation for (not) running suricata with root (6.0.x backport)
Documentation #6121: datasets: 6.0.x work-arounds for dataset supply chain attacks"

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2023-06-16 15:56:53 +00:00

..

acpid

…

avahi

…

backup

backup.pl: Fixes Bug#13137 - Existing n2n client connection created with openssl-1.1.1x fails to start with openssl-3.x

2023-06-05 14:50:18 +00:00

bash

…

bind

…

ca-certificates

ca-certificates: Update root CA certificates bundle

2023-03-11 16:16:10 +00:00

calamaris

calamaris: Make decompressing large logs more memory-friendly.

2012-07-19 14:06:47 +02:00

cdrom

memtest: update to memtest86+ v6.00

2022-11-18 14:37:25 +00:00

cfgroot

update-ipblocklists: Fix loading new blocklists after update

2023-04-04 19:59:23 +00:00

clamav

…

client175

client175: update to 0.7.

2011-06-01 23:46:42 +02:00

collectd

collectd: Do not keep track of entropy any more

2022-07-14 09:40:53 +00:00

cron

crontab: add periodic cleanup the collectd RRD (graphs)

2022-09-23 10:38:11 +00:00

cups

…

cyrus-sasl

…

dehydrated

…

dhcpc

dhcpcd: Only try to obtain an IP address for IPv4

2022-12-17 17:20:46 +00:00

dma

…

dracut

dracut: lower ram usage at compression

2023-05-16 18:52:08 +00:00

elinks

config/elinks/elinks.conf does not have to be executable

2021-05-20 10:01:50 +00:00

etc

modules.d: Drop orphaned blacklist statements

2022-10-03 10:21:24 +00:00

etc-aarch64

Install sysctl.conf only on those architectures where needed

2021-04-11 12:12:56 +00:00

etc-armv6l

switch arm 32 bit arch from armv5tel to armv6l

2021-07-05 07:42:39 +02:00

etc-x86_64

sysctl.conf: remove vm.mmap_rnd_compat_bits from x86_86 config

2023-01-08 17:21:59 +01:00

extrahd

…

findutils

…

firewall

firewall: Allow traffic from multicast networks

2023-05-02 19:28:57 +00:00

flash-images/grub

flash-images: Label serial console option as "serial"

2021-08-01 13:24:01 +00:00

freeradius

…

fstrim

…

fwhosts

icmp-types file does not have to be executable

2021-05-04 15:51:15 +00:00

gnump3d

…

grub2

dracut: Enable automatic assembly of any RAID/LVM devices

2022-05-16 18:31:12 +00:00

guardian

Bought a 'd' - fixed an old typo

2021-10-13 12:22:49 +00:00

haproxy

…

hostapd

hostapd: Enable QCA vendor extensions to nl80211

2023-04-24 18:42:25 +00:00

httpd

OpenVPN: Add support for 2FA / One-Time Password

2022-06-17 10:20:17 +00:00

icinga

Update to apache 2.4.27

2017-09-04 12:40:20 +01:00

include

…

initrd/dhcpc

…

ipblocklist

ipblocklist-sources: Correct the info url - Fixes bug#12938

2022-09-26 08:53:47 +00:00

iptraf-ng

…

kernel

kernel: update to 6.1.30

2023-05-30 09:21:34 +00:00

lcdproc

…

lib/firmware/brcm

…

libid3tag

libid3tag: Addition of pkgconfig file

2021-04-12 09:35:29 +00:00

libvirt

…

logwatch

ipblocklist: Add neccessary files for logwatch.

2022-07-07 17:28:05 +02:00

lua

lua: Update to version 5.4.4

2022-02-06 10:50:43 +00:00

menu

wio: relocate wio menu item to standard IPFire location

2023-05-18 09:47:46 +00:00

minidlna

…

monit

…

mpfire

…

netpbm

…

netsnmpd

…

nginx

Nginx: New package. Version 1.3.11.

2013-01-15 17:48:43 +01:00

ntp

Ship NTP changes

2022-06-20 20:43:34 +00:00

ovpn

openvpn-authenticator: Break read loop when daemon goes away

2023-01-07 21:01:48 +00:00

pmacct

pmacct: New addon

2021-05-11 16:44:46 +00:00

profile.d

bash startfiles: Add file to make sure that all paths are available.

2012-11-15 13:50:36 +01:00

proxy

…

qemu

Drop support for i586

2021-12-04 23:27:26 +01:00

qos

parse-func.pl: Adjust regular expression to changed 'tc' output

2023-04-07 14:35:11 +00:00

rootfiles

suricata: Update to 6.0.13

2023-06-16 15:56:53 +00:00

rpi-firmware

rpi-firmware: update to 20211127

2021-11-27 14:21:31 +00:00

rsnapshot

rsnapshot: New addon

2023-05-18 11:24:29 +00:00

samba

…

sarg

…

shadow

shadow: Update to version 4.11.1 and fix bug 12762

2022-01-18 21:23:42 +00:00

squidclamav

…

ssh

SSH: do not send spoofable TCP keep alive messages

2022-04-23 14:27:56 +00:00

ssl

OpenSSL: Add ffdhe4096 Diffie-Hellman parameter

2022-11-18 14:38:50 +00:00

strongswan

strongswan: No longer create any routes automatically

2019-02-04 18:20:36 +00:00

stunnel

…

suricata

suricata 6.0.8 - suggested change in 'suricata.yaml': set app-layer mqtt: enabled: yes

2022-10-03 16:51:38 +00:00

syslinux

cdrom: Drop menu option for HDT

2022-06-04 08:36:58 +00:00

sysstat

…

time

ntp: new enabled at default

2010-12-02 16:30:11 +01:00

tor

…

transmission

…

u-boot

u-boot: create signed bootscript at build time

2022-11-21 11:06:52 +00:00

udev

network: Assign "static" MAC addresses to QMI interfaces

2022-12-17 17:20:46 +00:00

unbound

unbound-dhcp-leases-bridge: Fall back to the default domain

2022-10-04 14:48:26 +00:00

updxlrator

Ensure /var/ipfire/updatexlrator/updxlrator-lib.pl is not writable by "nobody"

2022-11-18 13:33:45 +00:00

urlfilter

urlfilter: Download University of Toulouse list via HTTPS

2022-07-09 15:03:12 +00:00

vdr

…

vdradmin

…

vim

…

w_scan

…

wio

wio: moved files from src/wio directory to standard IPFire location

2023-05-18 09:47:47 +00:00

wpa_supplicant

…

xinetd

…

xtables-addons

xtables-addons: update to 3.13

2021-07-05 07:42:36 +02:00

zabbix_agentd

Add Zabbix Agent to logviewer

2023-05-11 20:03:27 +00:00