ETA on Suricata 7.0.8?

btspce

@bmeeks Just wondering if you have an eta on suricata 7.0.8 as it fixes five CVE's where two is rated critical and two high.

bmeeks

@btspce said in ETA on Suricata 7.0.8?:

@bmeeks Just wondering if you have an eta on suricata 7.0.8 as it fixes five CVE's where two is rated critical and two high.

No, sorry. The approval and merge into the official pfSense package repos is under the control of the Netgate developer team. I sent my contacts on that team an email when I posted the Pull Requests.

btspce

@bmeeks Thanks! Any idea why Netgate is so slow to get these releases into the repo ?

bmeeks

@btspce said in ETA on Suricata 7.0.8?:

@bmeeks Thanks! Any idea why Netgate is so slow to get these releases into the repo ?

Probably busy on the core product, which is the firewall code itself. Packages not used by pfSense out-of-the-box are not part of the core firewall, and thus don't receive the same priority.

Snort, Suricata, pfBlockerNG, and a few others are maintained by volunteers (non-paid, non-Netgate folks). They are available as installable add-ons to pfSense, but users should not expect the same level of support for those as the core firewall receives.

slu

@bmeeks said in ETA on Suricata 7.0.8?:

Packages not used by pfSense out-of-the-box are not part of the core firewall, and thus don't receive the same priority.

The point is, this packages are listet under Features and you "can't know" its maintained by volunteers:
https://www.netgate.com/pfsense-features#get-to-know

Anyway I'm sure the team is very busy at the moment, maybe the find a way to release this packages faster in future...

@bmeeks thank you for all the work on those packages!

michmoor

@slu said in ETA on Suricata 7.0.8?:

The point is, this packages are listet under Features and you "can't know" its maintained by volunteers:

There are quite a few posts here on the forum (some from me) highlighting that exact problem. I hope the marketing on the site gets cleared up one day !

bmeeks

The new 7.0.8 packages are building now and should show up soon on pfSense 2.7.2 CE and pfSense Plus 24.11.

Release notes can be found here: https://suricata.io/2024/12/12/suricata-7-0-8-released/.

btspce

@bmeeks Thanks !