linux/meta-security.git/recipes-ids, branch walnascar

suricata: fix build error introduced by upstream commit

2025-04-13T18:07:57+00:00

7a2b9acef2 cargo: pass PACKAGECONFIG_CONFARGS to cargo build error: unexpected argument '--with-libcap_ng-includes' found | | Usage: cargo build --verbose... --target [] --release --manifest-path --offline Signed-off-by: Armin Kuster

samhain: upgrade 4.4.10 -> 4.5.2

2025-04-13T18:07:57+00:00

ChangeLog: https://fossies.org/linux/samhain/docs/Changelog * Refresh patches Signed-off-by: Yi Zhao Signed-off-by: Armin Kuster

libhtp: update to 0.5.50

2025-04-13T18:07:57+00:00

drop CVE-2024-45797.patch now included Signed-off-by: Armin Kuster

libhtp: fix CVE-2024-45797

2024-11-25T01:15:36+00:00

Upstream-Status: Backport from https://github.com/OISF/libhtp/commit/0d550de551b91d5e57ba23e2b1e2c6430fad6818 Signed-off-by: Hitendra Prajapati Signed-off-by: Armin Kuster

suricata: run whole autotools_do_configure not just oe_runconf

2024-09-09T23:34:06+00:00

Otherwise Makefile isn't regenerated and do_compile fails with: suricata/7.0.0/suricata-7.0.0/missing: line 81: aclocal-1.16: command not found after automake upgrade from 1.16.5 to 1.17 from: https://git.openembedded.org/openembedded-core/commit/?id=b98328a6ff07119e7ba4f1072090d789e69edef8 Fixes: CDPATH="${ZSH_VERSION+.}:" && cd . && /bin/bash 'TOPDIR/BUILD/work/mach-distro-linux/suricata/7.0.0/suricata-7.0.0/missing' aclocal-1.16 -I m4 TOPDIR/BUILD/work/mach-distro-linux/suricata/7.0.0/suricata-7.0.0/missing: line 81: aclocal-1.16: command not found WARNING: 'aclocal-1.16' is missing on your system. You should only need it if you modified 'acinclude.m4' or 'configure.ac' or m4 files included by 'configure.ac'. The 'aclocal' program is part of the GNU Automake package: It also requires GNU Autoconf, GNU m4 and Perl in order to run: make: *** [Makefile:465: aclocal.m4] Error 127 Signed-off-by: Martin Jansa Signed-off-by: Armin Kuster

aide: update to latest stable.

2024-08-03T23:30:44+00:00

address new configure error. Enable pthread always mhash is being dropped in the next release so switch to gcrypt for now. Signed-off-by: Armin Kuster

suricata: fix QA warnings

2024-07-30T00:07:01+00:00

ERROR: suricata-7.0.0-r0 do_package: QA Issue: File '/usr/bin/suricata' from suricata was already stripped, this will prevent future debugging! [already-stripped] Signed-off-by: Armin Kuster

recipes-*: convert WORKDIR->UNPACKDIR

2024-07-30T00:07:01+00:00

Signed-off-by: Armin Kuster

Suricata: Security Fix for CVE-2024-37151, CVE-2024-38534, CVE-2024-38535, CVE-2024-38536

2024-07-30T00:07:01+00:00

Upstream-Status: Backport from [https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6b, https://github.com/OISF/suricata/commit/a753cdbe84caee3b66d0bf49b2712d29a50d67ae, https://github.com/OISF/suricata/commit/c82fa5ca0d1ce0bd8f936e0b860707a6571373b2, https://github.com/OISF/suricata/commit/2bd3bd0e318f19008e9fe068ab17277c530ffb92] CVE's Fixed: CVE-2024-37151 suricata: suricata: packet reassembly failure, which can lead to policy bypass CVE-2024-38534 suricata: suricata: Crafted modbus traffic can lead to unlimited resource accumulation within a flow CVE-2024-38535 suricata: Suricata: can run out of memory when parsing crafted HTTP/2 traffic CVE-2024-38536 suricata: NULL pointer dereference when http.memcap is reached Signed-off-by: Siddharth Doshi Signed-off-by: Armin Kuster

suricata: Start WORKDIR -> UNPACKDIR transition

2024-06-17T12:29:11+00:00

Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Wang Mingyu Signed-off-by: Armin Kuster