From: Raspbian automatic forward porter <root@raspbian.org>
Date: Wed, 2 Apr 2025 08:41:00 +0000 (+0100)
Subject: Merge version 1:6.0.1-3+rpi1 and 1:6.0.1-3+deb11u1 to produce 1:6.0.1-3+rpi1+deb11u1
X-Git-Tag: archive/raspbian/1%6.0.1-3+rpi1+deb11u1^0
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=a3ffe14f16d8f705ec8008f8e3429a748ba250b7;p=suricata.git

Merge version 1:6.0.1-3+rpi1 and 1:6.0.1-3+deb11u1 to produce 1:6.0.1-3+rpi1+deb11u1
---

a3ffe14f16d8f705ec8008f8e3429a748ba250b7
diff --cc debian/changelog
index 8e0803eb,ce2f378f..8d1d3ea3
--- a/debian/changelog
+++ b/debian/changelog
@@@ -1,9 -1,23 +1,30 @@@
- suricata (1:6.0.1-3+rpi1) bullseye-staging; urgency=medium
++suricata (1:6.0.1-3+rpi1+deb11u1) bullseye-staging; urgency=medium
 +
 +  [changes brought forward from 1:6.0.1-2+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sat, 08 May 2021 12:21:01 +0000]
 +  * Link with libatomic on armhf too.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Thu, 12 Aug 2021 18:48:23 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Wed, 02 Apr 2025 08:41:00 +0000
++
+ suricata (1:6.0.1-3+deb11u1) bullseye-security; urgency=medium
+ 
+   * Non-maintainer upload by the LTS Team.
+   * CVE-2021-45098
+     Fix bypass of HTTP-based signature by faking an RST TCP packet.
+   * CVE-2023-35852
+     Fix unintended file access in local filesystem.
+   * CVE-2024-32663
+     Fix using large amount of memory.
+   * CVE-2024-37151
+     Fix mishandling of multiple fragmented packets, which might lead to
+     policy bypass.
+   * CVE-2024-45796
+     Fix logic error during fragment reassembly.
+   * CVE-2025-29918
+     Fix infinite loop.
+   * CVE-2024-55626
+     Fix buffer overflow due to large BPF filter file.
+ 
+  -- Thorsten Alteholz <debian@alteholz.de>  Sun, 30 Mar 2025 12:03:02 +0200
  
  suricata (1:6.0.1-3) unstable; urgency=medium