suricata-vl.spec 21 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642
  1. %bcond_with systemd
  2. %bcond_with libprelude
  3. Summary: Intrusion Detection System
  4. Name: suricata
  5. Version: 7.0.8
  6. Release: 1%{?_dist_release}%{?with_systemd:.systemd}
  7. Group: network,security
  8. Vendor: Project Vine
  9. Distribution: Vine Linux
  10. License: GPLv2
  11. URL: https://suricata.io/
  12. Source0: https://www.openinfosecfoundation.org/download/%{name}-%{version}.tar.gz
  13. Source1: suricata.sysconfig
  14. Source2: fedora.notes
  15. Source3: suricata-tmpfiles.conf
  16. Source1000: suricata.init
  17. Source1001: suricata.logrotate
  18. Source1002: post_start
  19. Source1003: pre_stop
  20. # Irrelevant docs are getting installed, drop them
  21. Patch1: suricata-2.0.9-docs.patch
  22. # Suricata service file needs some options supplied
  23. Patch2: suricata-4.1.1-service.patch
  24. # Linux 5.2 headers moved SIOCGSTAMP to linux/sockios.h. Glibc will
  25. # include it via sys/socket.h in a future release. This is temporary
  26. # and should not be needed on other kernel/glibc combos.
  27. Patch3: suricata-4.1.4-socket.patch
  28. BuildRequires: gcc gcc-c++
  29. BuildRequires: rust cargo
  30. BuildRequires: libyaml-devel python3-pyyaml
  31. BuildRequires: libnfnetlink-devel libnetfilter_queue-devel libnet-devel
  32. BuildRequires: pkgconfig(zlib) pcre2-devel libcap-ng-devel
  33. BuildRequires: lz4-devel libpcap-devel
  34. BuildRequires: nspr-devel nss-devel file-devel
  35. BuildRequires: jansson-devel libmaxminddb-devel python3-devel lua-devel
  36. # Next line is for eBPF support
  37. %ifarch x86_64
  38. BuildRequires: clang llvm libbpf-devel
  39. %endif
  40. BuildRequires: autoconf automake libtool
  41. %if %{with systemd}
  42. BuildRequires: systemd
  43. %endif
  44. BuildRequires: hiredis-devel
  45. BuildRequires: libevent-devel
  46. %if %{with libprelude}
  47. BuildRequires: libprelude-devel
  48. %endif
  49. BuildRequires: gnutls-devel
  50. %ifarch x86_64
  51. BuildRequires: vectorscan-devel
  52. %endif
  53. Requires: python3-pyyaml
  54. Requires(pre): /usr/sbin/useradd
  55. %if %{with systemd}
  56. Requires(post): systemd
  57. Requires(preun): systemd
  58. Requires(postun): systemd
  59. %endif
  60. %description
  61. The Suricata Engine is an Open Source Next Generation Intrusion
  62. Detection and Prevention Engine. This engine is not intended to
  63. just replace or emulate the existing tools in the industry, but
  64. will bring new ideas and technologies to the field. This new Engine
  65. supports Multi-threading, Automatic Protocol Detection (IP, TCP,
  66. UDP, ICMP, HTTP, TLS, FTP and SMB! ), Gzip Decompression, Fast IP
  67. Matching, and GeoIP identification.
  68. %debug_package
  69. %prep
  70. %setup -q
  71. install -m 644 %{SOURCE2} doc/
  72. %patch1 -p1
  73. %patch2 -p1
  74. %patch3 -p1
  75. sed -i 's/(datadir)/(sysconfdir)/' etc/Makefile.am
  76. %ifarch x86_64
  77. sed -i 's/-D__KERNEL__/-D__KERNEL__ -D__x86_64__/' ebpf/Makefile.am
  78. %endif
  79. autoreconf -fv --install
  80. %build
  81. %configure --enable-gccprotect --enable-pie --disable-gccmarch-native \
  82. --disable-coccinelle --enable-nfqueue --enable-af-packet \
  83. --with-libnspr-includes=/usr/include/nspr4 \
  84. --with-libnss-includes=/usr/include/nss3 \
  85. --enable-jansson --enable-geoip --enable-lua --enable-hiredis \
  86. %if %{with libprelude}
  87. --enable-prelude \
  88. %endif
  89. --enable-rust \
  90. %ifarch x86_64
  91. --enable-ebpf-build --enable-ebpf \
  92. %endif
  93. --enable-python
  94. %make_build
  95. %install
  96. make DESTDIR="%{buildroot}" "bindir=%{_sbindir}" install
  97. # Setup etc directory
  98. mkdir -p %{buildroot}%{_sysconfdir}/%{name}/rules
  99. #install -m 640 rules/*.rules %{buildroot}%{_sysconfdir}/%{name}/rules
  100. for f in rules/*.rules; do
  101. touch %{buildroot}%{_sysconfdir}/%{name}/$f
  102. done
  103. install -m 600 *.config %{buildroot}%{_sysconfdir}/%{name}
  104. install -m 600 suricata.yaml %{buildroot}%{_sysconfdir}/%{name}/
  105. mkdir -p %{buildroot}%{_libexecdir}/%{name}
  106. install -m 755 %{SOURCE1002} %{buildroot}%{_libexecdir}/%{name}/
  107. install -m 755 %{SOURCE1003} %{buildroot}%{_libexecdir}/%{name}/
  108. mkdir -p %{buildroot}%{_sysconfdir}/%{name}/{start,stop}.d
  109. %if %{with systemd}
  110. mkdir -p %{buildroot}%{_unitdir}
  111. install -m 0644 etc/%{name}.service %{buildroot}%{_unitdir}/
  112. sed -i \
  113. -e 's|/var/run/|/run/|' \
  114. -e 's|=/sbin/suricata|=/usr/sbin/suricata|' \
  115. -e '/ExecStart=/a ExecStartPost=%{_libexecdir}/%{name}/post_start' \
  116. -e '/ExecReload=/a ExecStop=%{_libexecdir}/%{name}/pre_stop' \
  117. %{buildroot}%{_unitdir}/%{name}.service
  118. %else
  119. mkdir -p %{buildroot}%{_initdir}
  120. install -m 0644 %{SOURCE1000} %{buildroot}%{_initdir}/%{name}
  121. %endif
  122. mkdir -p %{buildroot}%{_sysconfdir}/sysconfig
  123. install -m 0755 %{SOURCE1} %{buildroot}%{_sysconfdir}/sysconfig/%{name}
  124. # Set up logging
  125. mkdir -p %{buildroot}/%{_var}/log/%{name}
  126. mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d
  127. #install -m 644 etc/%{name}.logrotate %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
  128. #sed -i -e 's|/var/run/%{name}\.pid|/var/run/%{name}/%{name}.pid|' %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
  129. install -m 644 %{SOURCE1001} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
  130. # Remove a couple things so they don't get picked up
  131. rm -rf %{buildroot}%{_includedir}
  132. rm -f %{buildroot}%{_libdir}/libhtp.la
  133. rm -f %{buildroot}%{_libdir}/libhtp.a
  134. rm -f %{buildroot}%{_libdir}/libhtp.so
  135. rm -rf %{buildroot}%{_libdir}/pkgconfig
  136. # Setup suricata-update data directory
  137. mkdir -p %{buildroot}/%{_var}/lib/%{name}
  138. # Setup tmpdirs
  139. %if %{with systemd}
  140. mkdir -p %{buildroot}%{_tmpfilesdir}
  141. install -m 0644 %{SOURCE3} %{buildroot}%{_tmpfilesdir}/%{name}.conf
  142. %endif
  143. mkdir -p %{buildroot}/run
  144. install -d -m 0755 %{buildroot}/run/%{name}/
  145. cp suricata-update/README.rst doc/suricata-update-README.rst
  146. %ifarch x86_64
  147. %check
  148. make check
  149. %endif
  150. %pre
  151. getent passwd suricata >/dev/null || useradd -r -M -s /sbin/nologin suricata
  152. %post
  153. %if %{with systemd}
  154. %systemd_post suricata.service
  155. %else
  156. if [ $1 -gt 0 ]; then
  157. /sbin/chkconfig --add suricata
  158. fi
  159. %endif
  160. %preun
  161. %if %{with systemd}
  162. %systemd_preun suricata.service
  163. %else
  164. if [ $1 -eq 0 -o -x /usr/bin/systemctl ]; then
  165. /sbin/service suricata stop
  166. /sbin/chkconfig suricata off ||:
  167. /sbin/chkconfig --del suricata
  168. fi
  169. %endif
  170. %postun
  171. %if %{with systemd}
  172. %systemd_postun_with_restart suricata.service
  173. %else
  174. if [ $1 -gt 0 -a -f /var/run/suricata/suricata.pid -a ! -x /bin/systemctl ]; then
  175. /sbin/service suricata restart
  176. fi
  177. %endif
  178. %files
  179. %doc doc/Basic_Setup.txt doc/suricata-update-README.rst
  180. %doc doc/Setting_up_IPSinline_for_Linux.txt doc/fedora.notes
  181. %{!?_licensedir:%global license %%doc}
  182. %license COPYING
  183. %attr(644,root,root) %{_mandir}/man1/*
  184. %{_sbindir}/suricata
  185. %{_sbindir}/suricatasc
  186. %{_sbindir}/suricatactl
  187. %{_sbindir}/suricata-update
  188. %{_libdir}/libhtp*
  189. %{_prefix}/lib/suricata/python
  190. %dir %{_libexecdir}/%{name}
  191. %attr(0755,root,root) %{_libexecdir}/%{name}/post_start
  192. %attr(0755,root,root) %{_libexecdir}/%{name}/pre_stop
  193. %config(noreplace) %attr(0640,suricata,suricata) %{_sysconfdir}/%{name}/suricata.yaml
  194. %config(noreplace) %attr(0640,suricata,suricata) %{_sysconfdir}/%{name}/*.config
  195. %ghost %config(noreplace) %attr(0640,suricata,suricata) %{_sysconfdir}/%{name}/rules/*.rules
  196. %config(noreplace) %attr(0600,suricata,root) %{_sysconfdir}/sysconfig/%{name}
  197. %config(noreplace) %attr(644,root,root) %{_sysconfdir}/logrotate.d/%{name}
  198. %attr(750,suricata,suricata) %dir %{_var}/log/%{name}
  199. %attr(750,suricata,suricata) %dir %{_sysconfdir}/%{name}
  200. %attr(750,suricata,suricata) %dir %{_sysconfdir}/%{name}/rules
  201. %attr(750,suricata,suricata) %dir %{_sysconfdir}/%{name}/start.d
  202. %attr(750,suricata,suricata) %dir %{_sysconfdir}/%{name}/stop.d
  203. %attr(2770,suricata,suricata) %dir %{_var}/lib/%{name}
  204. %attr(2770,suricata,suricata) %dir /run/%{name}/
  205. %if %{with systemd}
  206. %attr(644,root,root) %{_unitdir}/suricata.service
  207. %{_tmpfilesdir}/%{name}.conf
  208. %else
  209. %attr(0755,root,root) %{_initdir}/%{name}
  210. %endif
  211. %{_datadir}/%{name}/rules
  212. %changelog
  213. * Sat Dec 14 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.8-1
  214. - new upstream release.
  215. - built with vectorscan instead of hyperscan.
  216. * Tue Oct 01 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.7-1
  217. - new upstream release.
  218. * Sat Sep 07 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.6-2
  219. - rebuilt with current environment.
  220. * Thu Jun 27 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.6-1
  221. - new upstream release.
  222. * Tue Apr 23 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.5-1
  223. - new upstream release.
  224. * Wed Mar 20 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.4-1
  225. - new upstream release.
  226. * Fri Feb 09 2024 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.3-1
  227. - new upstream release.
  228. * Fri Oct 20 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.2-2
  229. - rebuilt with libbpf-1.2.2.
  230. * Fri Oct 20 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.2-1
  231. - new upstream release.
  232. * Thu Sep 14 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 7.0.1-1
  233. - new upstream release.
  234. * Fri Jun 16 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.13-1
  235. - new upstream release.
  236. * Wed May 10 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.12-1
  237. - new upstream release.
  238. * Fri Apr 14 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.11-1
  239. - new upstream release.
  240. - enabled hyperscan.
  241. * Sat Feb 25 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.10-2
  242. - disabled hyperscan.
  243. * Tue Jan 31 2023 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.10-1
  244. - new upstream release.
  245. * Tue Nov 29 2022 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.9-1
  246. - new upstream release.
  247. * Wed Nov 16 2022 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.8-2
  248. - rebuilt with hiredis-1.1.0.
  249. * Wed Sep 28 2022 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.8-1
  250. - new upstream release.
  251. * Tue Sep 27 2022 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.7-1
  252. - new upstream release.
  253. * Wed Jul 13 2022 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.6-1
  254. - new upstream release.
  255. * Thu Apr 21 2022 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.5-1
  256. - new upstream release.
  257. * Thu Nov 18 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.4-1
  258. - new upstream release.
  259. * Sun Jul 11 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.3-1
  260. - new upstream release.
  261. * Thu Mar 18 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.2-1
  262. - new upstream release.
  263. * Wed Feb 17 2021 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 6.0.1-1
  264. - new upstream release.
  265. * Mon Aug 17 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 5.0.3-2
  266. - rebuilt with python-3.8.
  267. * Tue May 19 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 5.0.3-1
  268. - new upstream release.
  269. * Wed Apr 15 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 5.0.2-2
  270. - rebuilt with libevent-2.1.11.
  271. * Sat Mar 07 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 5.0.2-1
  272. - new upstream release.
  273. * Wed Oct 30 2019 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> 5.0.0-3
  274. - initial build for Vine Linux.
  275. * Fri Oct 18 2019 Steve Grubb <sgrubb@redhat.com> 5.0.0-2
  276. - New feature release (which also fixes a security issue)
  277. - Enable ebpf on x86_64 only
  278. - Disable building on ppc64le due to rust problems
  279. * Thu Aug 01 2019 Steve Grubb <sgrubb@redhat.com> 4.1.4-4
  280. - Fix FTBFS bz 1736727
  281. * Sat Jul 27 2019 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.4-3
  282. - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
  283. * Mon Jul 22 2019 Steve Grubb <sgrubb@redhat.com> 4.1.4-2
  284. - Rebuild for libprelude so bump
  285. * Tue Apr 30 2019 Jason Taylor <jtfas90@gmail.com> 4.1.4-1
  286. - Upstream bugfix release
  287. * Thu Mar 07 2019 Steve Grubb <sgrubb@redhat.com> 4.1.3-1
  288. - Upstream bugfix release
  289. * Sun Feb 03 2019 Fedora Release Engineering <releng@fedoraproject.org> - 4.1.2-2
  290. - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
  291. * Fri Dec 21 2018 Jason Taylor <jtfas90@gmail.com> 4.1.2-1
  292. - Upstream bugfix release
  293. - Updated source to use official download site
  294. * Thu Dec 20 2018 Steve Grubb <sgrubb@redhat.com> 4.1.1-4
  295. - Adjust permissions on /run/suricata and /var/lib/suricata to group writable
  296. * Mon Dec 17 2018 Steve Grubb <sgrubb@redhat.com> 4.1.1-2
  297. - Remove ragel requirement
  298. * Mon Dec 17 2018 Steve Grubb <sgrubb@redhat.com> 4.1.1-1
  299. - Make log directory group readable
  300. - Allow users of the suricata group to run suricata-update
  301. - Add lz4-devel BuildRequires to support pcap compression
  302. - Update service file for systemd security protections
  303. - Upstream bugfix update
  304. * Tue Nov 20 2018 Steve Grubb <sgrubb@redhat.com> 4.1.0-3
  305. - Use the upstream service and logrote files (#1330331)
  306. - Make the log directory readable by members of the suricata group (#1651394)
  307. * Wed Nov 07 2018 Steve Grubb <sgrubb@redhat.com> 4.1.0-2
  308. - Add cargo BuildRequires
  309. * Tue Nov 06 2018 Steve Grubb <sgrubb@redhat.com> 4.1.0-1
  310. - Latest upstream major release
  311. - Fixes CVE-2018-18956 Segmentation fault in the ProcessMimeEntity function
  312. * Mon Aug 13 2018 Steve Grubb <sgrubb@redhat.com> - 4.0.5-3
  313. - Consolidate branches so that everything is in sync (#1614935)
  314. * Fri Aug 10 2018 Jason Taylor <jtfas90@gmail.com> 4.0.5-2
  315. - fixes bz#1614935
  316. * Wed Jul 18 2018 Jason Taylor <jtfas90@gmail.com> - 4.0.5-1
  317. - upstream security fix release
  318. - addresses CVE-2018-10242, CVE-2018-10243, CVE-2018-10244
  319. * Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.0.4-3
  320. - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  321. * Mon Jul 09 2018 Jason Taylor <jtfas90@gmail.com> - 4.0.4-2
  322. - bumped release for build against hyperscan 5.0.0
  323. * Mon Jul 09 2018 Jason Taylor <jtfas90@gmail.com> - 4.0.4-1
  324. - added gcc-c++ buildrequires
  325. * Thu Feb 15 2018 Jason Taylor <jtfas90@gmail.com> - 4.0.4-1
  326. - fixes bz#1543250 and bz#1543251
  327. - multiple upstream bugfixes
  328. * Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 4.0.3-3
  329. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
  330. * Mon Dec 11 2017 Jason Taylor <jtfas90@gmail.com> 4.0.3-2
  331. - Added prelude support
  332. * Fri Dec 08 2017 Jason Taylor <jtfas90@gmail.com> 4.0.3-1
  333. - Upstream bugfix release
  334. * Wed Oct 18 2017 Steve Grubb <sgrubb@redhat.com> 4.0.1-1
  335. - Upstream bugfix update
  336. * Tue Sep 26 2017 Steve Grubb <sgrubb@redhat.com> 4.0.0-2
  337. - Make suricata user own /run/suricata (#1396150)
  338. * Mon Jul 31 2017 Jason Taylor <jtfas90@gmail.com> 4.0.0-1
  339. - Latest upstream major release
  340. - Build now has hyperscan and redis support
  341. * Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.2.3-2
  342. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
  343. * Thu Jul 13 2017 Jason Taylor <jtfas90@gmail.com> 3.2.3-1
  344. - Upstream bugfix update
  345. * Wed Jun 07 2017 Steve Grubb <sgrubb@redhat.com> 3.2.2-1
  346. - Upstream bugfix update
  347. * Wed Feb 15 2017 Steve Grubb <sgrubb@redhat.com> 3.2.1-1
  348. - Upstream security update
  349. * Mon Feb 13 2017 Steve Grubb <sgrubb@redhat.com> 3.2-1
  350. - New upstream feature release
  351. - Rotate /var/log/suricata/eve.json (#1396151)
  352. - Fix ownership of /run/suricata (#1396150)
  353. * Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.1.3-2
  354. - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
  355. * Tue Nov 01 2016 Steve Grubb <sgrubb@redhat.com> 3.1.3-1
  356. - New upstream bug fix release
  357. * Wed Sep 07 2016 Steve Grubb <sgrubb@redhat.com> 3.1.2-1
  358. - New upstream bug fix release
  359. * Tue Jul 19 2016 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.1.1-2
  360. - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages
  361. * Wed Jul 13 2016 Steve Grubb <sgrubb@redhat.com> 3.1.1-1
  362. - New upstream bug fix release
  363. * Wed Jun 22 2016 Steve Grubb <sgrubb@redhat.com> 3.1-1
  364. - New upstream bug fix release
  365. * Mon Apr 04 2016 Steve Grubb <sgrubb@redhat.com> 3.0.1-1
  366. - New upstream bug fix release
  367. * Wed Mar 16 2016 Steve Grubb <sgrubb@redhat.com> 3.0-2
  368. - Fixed Bug 1227085 - Have Suricata start after the network is online
  369. * Mon Mar 07 2016 Steve Grubb <sgrubb@redhat.com> 3.0-1
  370. - New upstream bug fix release
  371. * Wed Feb 10 2016 Peter Schiffer <pschiffe@redhat.com> 2.0.11-3
  372. - Run suricata under suricata user
  373. * Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.0.11-2
  374. - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
  375. * Mon Dec 28 2015 Steve Grubb <sgrubb@redhat.com> 2.0.11-1
  376. - New upstream bug fix release
  377. * Wed Nov 25 2015 Steve Grubb <sgrubb@redhat.com> 2.0.10-1
  378. - New upstream bug fix release
  379. * Sat Oct 03 2015 Steve Grubb <sgrubb@redhat.com> 2.0.9-1
  380. - New upstream bug fix release
  381. * Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.8-2
  382. - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
  383. * Wed May 06 2015 Steve Grubb <sgrubb@redhat.com> 2.0.8-1
  384. - New upstream security bug fix release
  385. * Thu Feb 26 2015 Steve Grubb <sgrubb@redhat.com> 2.0.7-1
  386. - New upstream security bug fix release for CVE-2015-0928
  387. * Thu Jan 15 2015 Steve Grubb <sgrubb@redhat.com> 2.0.6-1
  388. - New upstream bug fix release
  389. - Don't use the system libhtp library
  390. * Fri Dec 12 2014 Steve Grubb <sgrubb@redhat.com> 2.0.5-1
  391. - New upstream bug fix release
  392. - Use the system libhtp library
  393. * Wed Sep 24 2014 Steve Grubb <sgrubb@redhat.com> 2.0.4-1
  394. - New upstream bug fix release
  395. - Fixes CVE-2014-6603 out-of-bounds access in SSH parser
  396. * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.3-2
  397. - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
  398. * Fri Aug 08 2014 Steve Grubb <sgrubb@redhat.com> 2.0.3-1
  399. - New upstream bug fix release
  400. * Sat Jun 28 2014 Steve Grubb <sgrubb@redhat.com> 2.0.2-2
  401. - Specfile cleanups (#1113413)
  402. * Wed Jun 25 2014 Steve Grubb <sgrubb@redhat.com> 2.0.2-1
  403. - New upstream bug fix release
  404. - Enable liblua support
  405. * Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.1-2
  406. - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
  407. * Wed May 21 2014 Steve Grubb <sgrubb@redhat.com> 2.0.1-1
  408. - New upstream bug fix release
  409. * Wed Mar 26 2014 Steve Grubb <sgrubb@redhat.com> 2.0-1
  410. - Major new upstream release with new features
  411. * Tue Jan 21 2014 Dan Horák <dan[at]danny.cz> 1.4.7-3
  412. - luajit available only on selected arches
  413. * Sat Jan 11 2014 Steve Grubb <sgrubb@redhat.com> 1.4.7-2
  414. - Enable luajit support
  415. * Wed Dec 18 2013 Steve Grubb <sgrubb@redhat.com> 1.4.7-1
  416. - New upstream bug fix release
  417. * Fri Oct 04 2013 Steve Grubb <sgrubb@redhat.com> 1.4.6-1
  418. - New upstream bug fix release
  419. * Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-3
  420. - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
  421. * Fri Jun 21 2013 Steve Grubb <sgrubb@redhat.com> 1.4.3-2
  422. - Drop prelude support
  423. * Fri Jun 21 2013 Steve Grubb <sgrubb@redhat.com> 1.4.3-1
  424. - New upstream bug fix release
  425. * Mon Jun 03 2013 Steve Grubb <sgrubb@redhat.com> 1.4.2-1
  426. - New upstream bug fix release
  427. * Sun Mar 10 2013 Steve Grubb <sgrubb@redhat.com> 1.4.1-1
  428. - New upstream bugfix release
  429. - Enable libgeoip support
  430. - Switch to stack-protector-all
  431. * Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4-2
  432. - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
  433. * Thu Dec 20 2012 Steve Grubb <sgrubb@redhat.com> 1.4-1
  434. - New upstream feature enhancement release
  435. * Thu Dec 06 2012 Steve Grubb <sgrubb@redhat.com> 1.3.5-1
  436. - New upstream bugfix release
  437. * Tue Nov 27 2012 Steve Grubb <sgrubb@redhat.com> 1.3.4-1
  438. - New upstream release
  439. * Mon Nov 05 2012 Steve Grubb <sgrubb@redhat.com> 1.3.3-1
  440. - New upstream release
  441. * Tue Oct 09 2012 Steve Grubb <sgrubb@redhat.com> 1.3.2-2
  442. - Add nss-devel build require and systemd macros
  443. * Mon Oct 08 2012 Steve Grubb <sgrubb@redhat.com> 1.3.2-1
  444. - New upstream release
  445. * Sat Aug 25 2012 Steve Grubb <sgrubb@redhat.com> 1.3.1-1
  446. - New upstream release
  447. - Switch startup to use systemd
  448. * Fri Jul 06 2012 Steve Grubb <sgrubb@redhat.com> 1.3-1
  449. - New upstream release
  450. * Fri Mar 30 2012 Jon Ciesla <limburgher@gmail.com> - 1.2.1-3
  451. - Rebuild for updated libnet.
  452. * Fri Feb 10 2012 Petr Pisar <ppisar@redhat.com> - 1.2.1-2
  453. - Rebuild against PCRE 8.30
  454. * Thu Feb 02 2012 Steve Grubb <sgrubb@redhat.com> 1.2.1-1
  455. - New upstream release
  456. * Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.1.1-3
  457. - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
  458. * Thu Dec 22 2011 Steve Grubb <sgrubb@redhat.com> 1.1.1-2
  459. - Enable AF_PACKET support
  460. * Wed Dec 07 2011 Steve Grubb <sgrubb@redhat.com> 1.1.1-1
  461. - New upstream release
  462. * Mon Jul 25 2011 Steve Grubb <sgrubb@redhat.com> 1.0.5-1
  463. - New upstream release
  464. * Fri Jun 24 2011 Steve Grubb <sgrubb@redhat.com> 1.0.4-1
  465. - New upstream release
  466. * Thu Apr 28 2011 Dan Horák <dan[at]danny.cz> 1.0.3-2
  467. - don't override -march set by the buildsystem (fixes build on non-x86)
  468. * Sat Apr 23 2011 Steve Grubb <sgrubb@redhat.com> 1.0.3-1
  469. - New upstream release
  470. * Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.2-2
  471. - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
  472. * Wed Nov 10 2010 Steve Grubb <sgrubb@redhat.com> 1.0.2-1
  473. - New upstream release (#651978)
  474. * Thu Jul 01 2010 Steve Grubb <sgrubb@redhat.com> 1.0.0-1
  475. - New upstream release
  476. * Fri May 07 2010 Steve Grubb <sgrubb@redhat.com> 0.9.0-1
  477. - New upstream release
  478. * Tue Apr 20 2010 Steve Grubb <sgrubb@redhat.com> 0.8.2-1
  479. - New upstream release
  480. * Sat Feb 27 2010 Steve Grubb <sgrubb@redhat.com> 0.8.1-1
  481. - Initial packaging