aboutsummaryrefslogtreecommitdiffstats
path: root/community/suricata/APKBUILD
diff options
context:
space:
mode:
Diffstat (limited to 'community/suricata/APKBUILD')
-rw-r--r--community/suricata/APKBUILD47
1 files changed, 27 insertions, 20 deletions
diff --git a/community/suricata/APKBUILD b/community/suricata/APKBUILD
index f121e92f679..27a5df198b4 100644
--- a/community/suricata/APKBUILD
+++ b/community/suricata/APKBUILD
@@ -2,12 +2,11 @@
# Contributor: Stuart Cardall <developer at it-offshore dot co.uk>
# Maintainer: Steve McMaster <code@mcmaster.io>
pkgname=suricata
-pkgver=6.0.3
+pkgver=7.0.4
pkgrel=0
pkgdesc="High performance Network IDS, IPS and Network Security Monitoring engine"
-url="https://suricata-ids.org/"
-# s390x and mips lacks rust support
-arch="all !s390x !mips !mips64 !riscv64"
+url="https://suricata.io/"
+arch="all"
license="GPL-2.0-only"
makedepends="
autoconf
@@ -17,19 +16,19 @@ makedepends="
geoip-dev
hiredis-dev
jansson-dev
+ libbpf-dev
libcap-ng-dev
- libhtp-dev>=0.5.25
+ libhtp-dev
libmaxminddb-dev
libnetfilter_log-dev
libnetfilter_queue-dev
libnet-dev
libnfnetlink-dev
libpcap-dev
- libtool
lz4-dev
nspr-dev
nss-dev
- pcre-dev
+ pcre2-dev
rust
yaml-dev
"
@@ -44,34 +43,35 @@ source="https://www.openinfosecfoundation.org/download/suricata-$pkgver.tar.gz
"
# secfixes:
+# 6.0.4-r0:
+# - CVE-2021-37592
+# - CVE-2021-45098
# 6.0.3-r0:
# - CVE-2021-35063
case "$CARCH" in
- x86|x86_64|aarch64)
- _lua="--enable-luajit"
- makedepends="$makedepends luajit-dev vectorscan-dev" ;;
- ppc64le)
- # ppc64le has missing symbols with luajit and lua
+ ppc64le|riscv64)
_lua="" ;;
*)
_lua="--enable-luajit"
makedepends="$makedepends luajit-dev" ;;
esac
-prepare() {
- default_prepare
- autoreconf -vif
-}
+case "$CARCH" in
+ x86_64|aarch64|ppc64le)
+ makedepends="$makedepends vectorscan-dev" ;;
+esac
+
build() {
- HAVE_PYTHON=/usr/bin/python3 ./configure \
+ ./configure \
--build=$CBUILD \
--host=$CHOST \
--prefix=/usr \
--sysconfdir=/etc \
--mandir=/usr/share/man \
--localstatedir=/var \
+ --enable-ebpf \
--enable-non-bundled-htp \
--enable-nflog \
--enable-nfqueue \
@@ -86,7 +86,13 @@ build() {
}
check() {
- make check
+ case "$CARCH" in
+ ppc64le)
+ # ppc64le optimizes out FlowGetLastTimeAsParts somehow, causing cargo test to fail
+ echo "check() disabled on ppc64le" ;;
+ *)
+ make check ;;
+ esac
}
package() {
@@ -102,10 +108,11 @@ package() {
mkdir -p "$pkgdir"/etc/$pkgname/rules
install -Dm644 "$builddir"/rules/*.rules "$pkgdir"/etc/$pkgname/rules/
}
+
sha512sums="
-186b871959988ca7cbd0d69e725aed18af915f93363c7ecc0ffa20d8ad8f50a326be08452d085772b1df84ef25258ef0dd6b35d41b0988cb1c653e60aeb103a2 suricata-6.0.3.tar.gz
+098364a5f0b2c14bf3a0c8895ec9c94a23edd990468f618fa35181c54405be6db012a6e97981e0024140864342764df97101be73308c835d6fabf6cd98a7ffc3 suricata-7.0.4.tar.gz
ed7c78a80192f3f3ed433330df323beccb6079b5413289b9e9faa3fceea2c536de93de7372968d8605abd1618d73c9319ee39d86b16eed22e7313c8667252f5d suricata.confd
258c6d60fc878dc1c7b7bf93cc758080050f591084a1edf7f1aac81ccb523c73615716616fedd0269f9ac5ef2fa7adcb3e2cefd714754bac5571e9806b6781be suricata.initd
4f76a35bcde78c9860701897fe19bb84cc46bbc429124c4cb2e94cf3330f00ebe8067c0d7f3f83478e9b95323adb947e5081658f455657c4d03c682abe707534 suricata.logrotate
-e0e5a03c9b681bd1b5ac44b450ae896f32c99cd95a9247ad075b5a1428ae2c476d93abc449c20e43ae472edbc0b6a4f00b1b9b022a5eea7bb086fcc0accd42ed 10-nflog.patch
+86f50f1ff75bf54d23b473d272e3d6d0fb17f6ae6686fd2fd6c5d908a80029368a987ee725111f311a48d1a66e11d41978b7c8b5aa76411a9d85a737a7a2f62b 10-nflog.patch
"