suricata-bin: patch security issues (!220) · Merge requests · Turris / Turris OS / Turris OS packages · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.

Jan Pavlinec requested to merge hotfix/suricata-cve into master Feb 11, 2020

This PR fixes Suricata bin because of 2 security issues that could bypass signature detection in TCP. Run tested with suricata-pakon.

Patches are taken from upstream.

CVE list:

CVE-2019-18625
CVE-2019-18792

Fixes https://gitlab.labs.nic.cz/turris/turris-os-packages/issues/542