release: 7.0.13; update changelog

inashivb · inashivb · commit 090542709cf6 · 2025-11-05T19:50:37.000+05:30
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,20 @@
+7.0.13 -- 2025-11-05
+
+Security #8067: lua: stack overflow from unbounded stack allocation in LuaPushStringBuffer (7.0.x backport)(HIGH - CVE 2025-64344)
+Security #8062: eve/http: stack overflow on large file transfers (7.0.x backport)(MODERATE - CVE 2025-64331)
+Security #8061: util/swf: stack overflow on larger compressed data  (7.0.x backport)(LOW - CVE 2025-64332)
+Security #8060: eve/http: stack overflow from big content type (7.0.x backport)(HIGH - CVE 2025-64333)
+Security #8029: eve/alert: heap buffer overflow on verdict (7.0.x backport)(MODERATE - CVE 2025-64330)
+Security #8080: unix-socket: use after free if client command is too long (7.0.x backport)
+Bug #8013: dpdk: compile warning ‘rte_eth_bond_members_get’ is deprecated (7.0.x backport)
+Bug #7999: detect: replace keyword leaks memory (7.0.x backport)
+Bug #7993: http2: wrong parsing of go away frames error code (7.0.x backport)
+Bug #7977: dpdk: fix the CPU exclude logic (7.0.x backport)
+Bug #7962: mime: incorrect decoding of quoted-printable text attachments (7.0.x backport)
+Bug #7924: output/json: invalid IKE logs (7.0.x backport)
+Bug #7906: eve/alert: incorrect verdict with pass + alert rule (7.0.x backport)
+Task #6522: github/actions: add DPDK 23.11 build (7.0.x backport)
+
 7.0.12 -- 2025-09-15
 
 Security #7852: tcp: syn resend with different seq leads to detection bypasss (7.0.x backport)(HIGH - CVE 2025-59147)
diff --git a/configure.ac b/configure.ac
@@ -1,4 +1,4 @@
-    AC_INIT([suricata],[7.0.13-dev])
+    AC_INIT([suricata],[7.0.13])
     m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes])
     AC_CONFIG_HEADERS([src/autoconf.h])
     AC_CONFIG_SRCDIR([src/suricata.c])
diff --git a/requirements.txt b/requirements.txt
@@ -3,5 +3,5 @@
 # Format:
 #
 #   name {repo} {branch|tag}
-libhtp https://github.com/OISF/libhtp 0.5.x
+libhtp https://github.com/OISF/libhtp 0.5.52
 suricata-update https://github.com/OISF/suricata-update 1.3.7
diff --git a/rust/Cargo.lock.in b/rust/Cargo.lock.in

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`- AC_INIT([suricata],[7.0.13-dev])`
	`1`	`+ AC_INIT([suricata],[7.0.13])`
`2`	`2`	`m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes])`
`3`	`3`	`AC_CONFIG_HEADERS([src/autoconf.h])`
`4`	`4`	`AC_CONFIG_SRCDIR([src/suricata.c])`
Original file line number	Diff line number	Diff line change
`@@ -3,5 +3,5 @@`
`3`	`3`	`# Format:`
`4`	`4`	`#`
`5`	`5`	`# name {repo} {branch\|tag}`
`6`		`-libhtp https://github.com/OISF/libhtp 0.5.x`
	`6`	`+libhtp https://github.com/OISF/libhtp 0.5.52`
`7`	`7`	`suricata-update https://github.com/OISF/suricata-update 1.3.7`