diff options
-rw-r--r-- | nixos/doc/manual/release-notes/rl-2311.section.md | 2 | ||||
-rw-r--r-- | pkgs/applications/networking/ids/suricata/default.nix | 11 |
2 files changed, 6 insertions, 7 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2311.section.md b/nixos/doc/manual/release-notes/rl-2311.section.md index 616e45918d9a8..066d772f13f29 100644 --- a/nixos/doc/manual/release-notes/rl-2311.section.md +++ b/nixos/doc/manual/release-notes/rl-2311.section.md @@ -152,6 +152,8 @@ The module update takes care of the new config syntax and the data itself (user - `boot.initrd.network.udhcp.enable` allows control over dhcp during stage 1 regardless of what `networking.useDHCP` is set to. +- Suricata was upgraded from 6.0 to 7.0 and no longer considers HTTP/2 support as experimental, see [upstream release notes](https://forum.suricata.io/t/suricata-7-0-0-released/3715) for more details. + ## Nixpkgs internals {#sec-release-23.11-nixpkgs-internals} - The `qemu-vm.nix` module by default now identifies block devices via diff --git a/pkgs/applications/networking/ids/suricata/default.nix b/pkgs/applications/networking/ids/suricata/default.nix index b5427384e9286..9c0a5ea086f8f 100644 --- a/pkgs/applications/networking/ids/suricata/default.nix +++ b/pkgs/applications/networking/ids/suricata/default.nix @@ -22,8 +22,7 @@ , luajit , lz4 , nspr -, nss -, pcre +, pcre2 , python , zlib , redisSupport ? true, redis, hiredis @@ -34,11 +33,11 @@ in stdenv.mkDerivation rec { pname = "suricata"; - version = "6.0.13"; + version = "7.0.0"; src = fetchurl { url = "https://www.openinfosecfoundation.org/download/${pname}-${version}.tar.gz"; - hash = "sha256-4J8vgA0ODNL5fyHFBZUMzD27nOXP6AjflWe22EmjEFU="; + hash = "sha256-e80TExGDZkUUZdw/g4Wj9qrdCE/+RN0lfdqBBYY7t2k="; }; nativeBuildInputs = [ @@ -67,8 +66,7 @@ stdenv.mkDerivation rec { luajit lz4 nspr - nss - pcre + pcre2 python zlib ] @@ -101,7 +99,6 @@ stdenv.mkDerivation rec { "--enable-nflog" "--enable-nfqueue" "--enable-pie" - "--disable-prelude" "--enable-python" "--enable-unix-socket" "--localstatedir=/var" |