Re: [Buildroot] [PATCH 1/1] package/suricata: bump version to 8.0.4

[Julien Olivain via buildroot <buildroot@buildroot.org>]

Hi Bernd,

Thanks for the patch.

On 03/04/2026 21:12, Bernd Kuhls wrote:
[...]
> diff --git a/package/suricata/suricata.mk 
> b/package/suricata/suricata.mk
> index 8840853054..0ee3752a21 100644
> --- a/package/suricata/suricata.mk
> +++ b/package/suricata/suricata.mk
> @@ -4,7 +4,7 @@
>  #
>  
> ################################################################################
> 
> -SURICATA_VERSION = 6.0.20
> +SURICATA_VERSION = 8.0.4

This is quite a large bump. I looked for the release notes, and just
found that v8.0.4 was fixing few critical CVEs. See:
https://forum.suricata.io/t/suricata-8-0-4-and-7-0-15-released/6218

Also, according to pkg-stats, there is currently 28 CVEs reported
on this package:
https://autobuild.buildroot.org/stats/master.html

I did not checked when those CVEs were introduced or if they are
all applicable, but this should be mentioned in the commit log.
It is likely this bump should be marked as a "security" one.

I believe your first motivation was to get rid of pcre (v1)
dependency, but could you add the release notes links in the
commit log, and add a note in the commit log, mentioning either:
- none of the CVE in the release notes are applying, because
they were introduced in intermediate versions, or
- the list of the fixed CVEs, to help the LTS maintainers
(and mark the bump as "security").

>  SURICATA_SITE = https://www.openinfosecfoundation.org/download
>  SURICATA_LICENSE = GPL-2.0
>  SURICATA_LICENSE_FILES = COPYING LICENSE

Best regards,

Julien.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot