From 3bd9f773bdc65d7bede2f0576790a68fb68b7476 Mon Sep 17 00:00:00 2001 From: Juliana Fajardini Date: Fri, 9 Jan 2026 12:06:56 -0300 Subject: [PATCH] release: 8.0.3; update changelog --- ChangeLog | 34 ++++++++++++++++++++++++++++++++++ configure.ac | 2 +- rust/Cargo.lock.in | 12 ++++++------ rust/sys/src/sys.rs | 2 +- 4 files changed, 42 insertions(+), 8 deletions(-) diff --git a/ChangeLog b/ChangeLog index ef78771fb4..e8c9358414 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,37 @@ +8.0.3 -- 2026-01-09 + +Security #8202: http: quadratic complexity in headers parsing over multiple packets (8.0.x backport)(HIGH - CVE 2026-22263) +Security #8199: dnp3: unbounded transaction growth (8.0.x backport)(HIGH - CVE 2026-22259) +Security #8197: dcerpc: unbounded fragment buffering leads to memory exhaustion (8.0.x backport)(CRITICAL - CVE 2026-22258) +Security #8191: detect/alert: heap-use-after-free on alert queue expansion (8.0.x backport)(HIGH - CVE 2026-22264) +Security #8186: http: infinite recursion in decompression (8.0.x backport)(HIGH - CVE 2026-22260) +Security #8157: eve/alert: http xff handling can lead to denial of service (8.0.x backport)(MODERATE - CVE 2026-22261) +Security #8111: datasets: stack overflow (8.0.x backport)(HIGH - CVE 2026-22262) +Bug #8211: rust: update lru crate to address RUSTSEC-2026-0002 (8.0.x backport) +Bug #8188: tcp: fast open packet not fully handled (8.0.x backport) +Bug #8180: eve/tls: version not logged for client hello only session (8.0.x backport) +Bug #8178: flow: mac addresses are not swapped (8.0.x backport) +Bug #8177: xbits: no error on invalid 'expire' values (8.0.x backport) +Bug #8176: lua: crash with luaxform and arguments (8.0.x backport) +Bug #8155: tls: ssl_version keyword negation (!) not working (8.0.x backport) +Bug #8152: stream/reassembly: BUG_ON triggered from AdjustToAcked in debug mode (8.0.x backport) +Bug #8151: nfs: NFS3/NFS2 procedure conflict (8.0.x backport) +Bug #8134: configure: hint for installing bindgen is outdated (8.0.x backport) +Bug #8120: file: wrong hash on small multipart files (8.0.x backport) +Bug #8103: unix-socket: hostbit commands ipv6 parsing issues (8.0.x backport) +Bug #8074: util/time: wrong parameter used in function (8.0.x backport) +Bug #7709: pop3: parse error blocks sessions +Optimization #8107: conf: timeout on too many scalar events (8.0.x backport) +Feature #8175: frames: add --list-frames option (8.0.x backport) +Feature #8144: af-packet: runtime option/flag to disable hardware timestamp support (8.0.x backport) +Feature #8100: nfs: NFSv4 should support 4.1's new enums (8.0.x backport) +Task #8148: psl: crate should be updated on every release (8.0.x backport) +Task #8091: schema: allow stream events for stats (8.0.x backport) +Documentation #8136: luaxform: options incorrectly described (8.0.x backport) +Documentation #8079: transform/luaxform: documentation states it supports init function (8.0.x backport) +Documentation #7938: docs: update backports policy for suri 7 (8.0.x backport) +Documentation #7931: userguide: update & improve exception policy section (8.0.x backport) + 8.0.2 -- 2025-11-05 Security #8066: lua: stack overflow from unbounded stack allocation in LuaPushStringBuffer (8.0.x backport)(HIGH - CVE 2025-64344) diff --git a/configure.ac b/configure.ac index 8e1a6a1d36..7749679e50 100644 --- a/configure.ac +++ b/configure.ac @@ -1,4 +1,4 @@ - AC_INIT([suricata],[8.0.3-dev]) + AC_INIT([suricata],[8.0.3]) m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes]) AC_CONFIG_HEADERS([src/autoconf.h]) AC_CONFIG_SRCDIR([src/suricata.c]) diff --git a/rust/Cargo.lock.in b/rust/Cargo.lock.in index 7226ce5f7a..9d2ef26d99 100644 --- a/rust/Cargo.lock.in +++ b/rust/Cargo.lock.in @@ -1506,7 +1506,7 @@ checksum = "6bdef32e8150c2a081110b42772ffe7d7c9032b606bc226c8260fd97e0976601" [[package]] name = "suricata" -version = "8.0.3-dev" +version = "8.0.3" dependencies = [ "aes", "aes-gcm", @@ -1558,7 +1558,7 @@ dependencies = [ [[package]] name = "suricata-derive" -version = "8.0.3-dev" +version = "8.0.3" dependencies = [ "proc-macro-crate", "proc-macro2", @@ -1568,7 +1568,7 @@ dependencies = [ [[package]] name = "suricata-htp" -version = "8.0.3-dev" +version = "8.0.3" dependencies = [ "base64", "brotli", @@ -1594,11 +1594,11 @@ dependencies = [ [[package]] name = "suricata-sys" -version = "8.0.3-dev" +version = "8.0.3" [[package]] name = "suricatactl" -version = "8.0.3-dev" +version = "8.0.3" dependencies = [ "clap", "once_cell", @@ -1609,7 +1609,7 @@ dependencies = [ [[package]] name = "suricatasc" -version = "8.0.3-dev" +version = "8.0.3" dependencies = [ "clap", "home", diff --git a/rust/sys/src/sys.rs b/rust/sys/src/sys.rs index dcb98e60c6..4849154907 100644 --- a/rust/sys/src/sys.rs +++ b/rust/sys/src/sys.rs @@ -1,6 +1,6 @@ // This file is automatically generated. Do not edit. -pub const SC_PACKAGE_VERSION: &[u8; 10] = b"8.0.3-dev\0"; +pub const SC_PACKAGE_VERSION: &[u8; 6] = b"8.0.3\0"; pub type __intmax_t = ::std::os::raw::c_long; pub type intmax_t = __intmax_t; #[repr(u32)]