mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
ab2fc8d88f
The v6.0.20 is the last patch level version bump of suricata version 6. This version is now EOL since July 2024 and other new vulnerabilities apply to this package. For more details on the version bump, see: - https://suricata.io/2024/06/27/suricata-7-0-6-and-6-0-20-released/ - https://github.com/OISF/suricata/releases/tag/suricata-6.0.20 Fixes the following vulnerabilities: - CVE-2024-37151 Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. When using af-packet, enable `defrag` to reduce the scope of the problem. For more information, see: - https://nvd.nist.gov/vuln/detail/CVE-2024-37151 - CVE-2024-38535 Suricata can run out of memory when parsing crafted HTTP/2 traffic. For more information, see: - https://nvd.nist.gov/vuln/detail/CVE-2024-38535 Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>