release: 7.0.17; update changelog

ChangeLog

@@ -1,3 +1,15 @@
+7.0.17 -- 2026-07-07
+
+Security #8672: mqtt: unbounded number of messages per tx (7.0.x backport)(HIGH - CVE 2026-57227)
+Security #8665: windows: unquoted LocalSystem service ImagePath (7.0.x backport)(LOW - CVE 2026-57223)
+Security #8644: detect/file_data: heap buffer overflow in SWF decompression depth handling (7.0.x backport)(LOW - CVE 2026-57226)
+Security #8608: mime: buffer over read in quoted printable decoding(HIGH - CVE 2026-57228)
+Security #8569: ippair: IPv4/IPv6 hash collision can reuse wrong IPPair state (7.0.x backport)(MODERATE - CVE 2026-57222)
+Security #8571: flow: IPv4/IPv6 hash collision can reuse wrong flow state (7.0.x backport)
+Security #8689: smb: unbounded memory for transactions on unidirectional flows (7.0.x backport)
+Task #8639: flowbits: deprecate "toggle" command
+Task #5994: tracking: rust: update dependencies
+
 7.0.16 -- 2026-05-19
 
 Security #8555: http2: excessive memory alloc with decompression bomb (7.0.x backport)(HIGH - CVE 2026-46387)

configure.ac

@@ -1,4 +1,4 @@
-    AC_INIT([suricata],[7.0.17-dev])
+    AC_INIT([suricata],[7.0.17])
     m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes])
     AC_CONFIG_HEADERS([src/autoconf.h])
     AC_CONFIG_SRCDIR([src/suricata.c])

requirements.txt

@@ -3,5 +3,5 @@
 # Format:
 #
 #   name {repo} {branch|tag}
-libhtp https://github.com/OISF/libhtp 0.5.x
-suricata-update https://github.com/OISF/suricata-update 1.3.7
+libhtp https://github.com/OISF/libhtp 0.5.53
+suricata-update https://github.com/OISF/suricata-update 1.3.8

rust/Cargo.lock.in

@@ -927,7 +927,7 @@ checksum = "6bdef32e8150c2a081110b42772ffe7d7c9032b606bc226c8260fd97e0976601"
 
 [[package]]
 name = "suricata"
-version = "7.0.16"
+version = "7.0.17"
 dependencies = [
  "aes",
  "aes-gcm",
@@ -973,7 +973,7 @@ dependencies = [
 
 [[package]]
 name = "suricata-derive"
-version = "7.0.16"
+version = "7.0.17"
 dependencies = [
  "proc-macro-crate",
  "proc-macro2",