Suricata 4.1 EOL 31/DEC/2020

[0liv]

Hello everyone,

When I run that command, I got this:

[root @ untangle] ~ # suricata -V
This is Suricata version 4.1.2 RELEASE

I'm running the latest untangle version
(Build: 16.1.1.20201028T105733.d127809143-1buster)

On suricata-ids.org/download I found that version 4.1 will go end of life very soon ... 31/dec/2020.

Suricata (Old Stable 4.1) version is 4.1.10; released December 4, 2020.

Linux/Mac/FreeBSD/UNIX/Windows Source: suricata-4.1.10.tar.gz
PGP Signature: suricata-4.1.10.tar.gz.sig
Note: 4.1 will go end of life (EOL) on December 31st, 2020.


Do you think it would be a problem to run an outdated version? A security issue ?
How long do you think the dev-team could take to integrate an updated version?
I guess they have plans to integrate it already, but I couldn't find any info on the site.

Thank you for your feedback.
0.

[jcoffin]

Signatures are still provided for the version. Technical it is version 1:4.1.2-2+deb10u1 which is a Debian security patch version of 1:4.1. You can track it in https://tracker.debian.org/pkg/suricata.

[Riven]

As and added question, will untangle update to newer versions soon?

Suricata news:

We are pleased to announce the releases of Suricata 6.0.1, 5.0.5 and 4.1.10. These releases are bug fix releases, fixing numerous important issues.

The 6.0.1 release also improves the experimental HTTP/2 support.

This will be the last release in the 4.1 series. If you are still on this branch, please upgrade to the 5 or 6 branch as soon as possible to make sure you can stay current on fixes and improvements.

[sky-knight]

Untangle will update to the newer versions when the Debian maintainers update. Typically, sometimes things get rushed to the back ports release... but that usually means something show stopping requires it.

If you look at the above link: https://tracker.debian.org/pkg/suricata It tells the tale.

Debian uses v4.1.2 in stable, 5.0.3 in back ports, and 6.0.1 in testing.

So when you see the version change in stable, it will come to Untangle after that.

[Riven]

Untangle will update to the newer versions when the Debian maintainers update. Typically, sometimes things get rushed to the back ports release... but that usually means something show stopping requires it.

If you look at the above link: https://tracker.debian.org/pkg/suricata It tells the tale.

Debian uses v4.1.2 in stable, 5.0.3 in back ports, and 6.0.1 in testing.

So when you see the version change in stable, it will come to Untangle after that.

Thanks!