release: 7.0.14; update changelog

inashivb · inashivb · commit 163bd652dfa9 · 2026-01-09T20:23:00.000+05:30
diff --git a/ChangeLog b/ChangeLog
@@ -1,3 +1,22 @@
+7.0.14 -- 2026-01-09
+
+Security #8209: eve/alert: http xff handling can lead to denial of service (7.0.x backport)(LOW - CVE 2026-22261)
+Security #8200: dnp3: unbounded transaction growth (7.0.x backport)(HIGH - CVE 2026-22259)
+Security #8198: dcerpc: unbounded fragment buffering leads to memory exhaustion (7.0.x backport)(CRITICAL - CVE 2026-22258)
+Security #8192: detect/alert: heap-use-after-free on alert queue expansion (7.0.x backport)(HIGH - CVE 2026-22264)
+Security #8112: datasets: stack overflow (7.0.x backport)(HIGH - CVE 2026-22262)
+Bug #8196: flow: mac addresses are not swapped (7.0.x backport)
+Bug #8158: tls: ssl_version keyword negation (!) not working (7.0.x backport)
+Bug #8121: file: wrong hash on small multipart files (7.0.x backport)
+Bug #8104: unix-socket: hostbit commands ipv6 parsing issues (7.0.x backport)
+Bug #7907: eve/alert: verdict reports "alert" when traffic is allowed implicitly/passively (7.0.x backport)
+Optimization #8108: conf: timeout on too many scalar events (7.0.x backport)
+Feature #8145: af-packet: runtime option/flag to disable hardware timestamp support (7.0.x backport)
+Feature #8101: nfs: NFSv4 should support 4.1's new enums (7.0.x backport)
+Feature #6681: flow: midstream exception policy "reject-both" support (7.0.x backport)
+Task #8092: schema: allow stream events for stats (7.0.x backport)
+Documentation #7939: docs: update backports policy for suri 7 (7.0.x backport)
+
 7.0.13 -- 2025-11-05
 
 Security #8067: lua: stack overflow from unbounded stack allocation in LuaPushStringBuffer (7.0.x backport)(HIGH - CVE 2025-64344)
diff --git a/configure.ac b/configure.ac
@@ -1,4 +1,4 @@
-    AC_INIT([suricata],[7.0.14-dev])
+    AC_INIT([suricata],[7.0.14])
     m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes])
     AC_CONFIG_HEADERS([src/autoconf.h])
     AC_CONFIG_SRCDIR([src/suricata.c])
diff --git a/requirements.txt b/requirements.txt
@@ -3,5 +3,5 @@
 # Format:
 #
 #   name {repo} {branch|tag}
-libhtp https://github.com/OISF/libhtp 0.5.x
+libhtp https://github.com/OISF/libhtp 0.5.52
 suricata-update https://github.com/OISF/suricata-update 1.3.7
diff --git a/rust/Cargo.lock.in b/rust/Cargo.lock.in

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`- AC_INIT([suricata],[7.0.14-dev])`
	`1`	`+ AC_INIT([suricata],[7.0.14])`
`2`	`2`	`m4_ifndef([AM_SILENT_RULES], [m4_define([AM_SILENT_RULES],[])])AM_SILENT_RULES([yes])`
`3`	`3`	`AC_CONFIG_HEADERS([src/autoconf.h])`
`4`	`4`	`AC_CONFIG_SRCDIR([src/suricata.c])`
Original file line number	Diff line number	Diff line change
`@@ -3,5 +3,5 @@`
`3`	`3`	`# Format:`
`4`	`4`	`#`
`5`	`5`	`# name {repo} {branch\|tag}`
`6`		`-libhtp https://github.com/OISF/libhtp 0.5.x`
	`6`	`+libhtp https://github.com/OISF/libhtp 0.5.52`
`7`	`7`	`suricata-update https://github.com/OISF/suricata-update 1.3.7`