## OISF/suricata — suricata-8.0.2…suricata-8.0.3

_63 commits._

### Features
- **doc: add dcerpc.max-stub-size config param** (70655fa)
- **dcerpc: add upper limit on stub data** (39d8c30)
- **frames: add --list-app-layer-frames option** (91c07f1)
- **af-packet: add disable-hwtimestamp option** (dccfc4f)
- **stream/tcp: check new last_ack stays within base_seq bounds** (92dae73)
- **schema: add descriptions to global memcaps/memuses** (3b018b1)
- **schema: add additional properties to stats.capture** (9531f87)
- **schema: add desc for each main stats module** (7078150)
- **nfs: Support EXCLUSIVE4_1 flag** (dc2faaa)

### Fixes
- **util/macset: fix code style** (c677dc4)
- **detect/luaxform: fix allowed lua rules check** (8f91524)
- **rust: fix clippy warning for implicit cast** (b393414)
- **rust: fix clippy warning for unused import** (5db8c5c)
- **counters: fix comment for set function** (e24f173)
- **nfs: Fix NFSv2 STATFS procedure parsing** (07c7f91)
- **file: fix hash computation for small multipart files** (4b365af)
- **configure: fix binary crate name in hint message if bindgen is not found** (d0e56b1)
- **thresholds: fix unittest compile warning** (26d576d)
- **unix-socket/hostbits: fix ipv6 address parsing** (3f88e5c)
- **util/time: fix TimeDifferenceMicros microseconds computation** (f8f3cfd)

### Backend
- **release: 8.0.3; update changelog** (3bd9f77)
- **rust: update lru to 0.16.3; update lock** (f72f458)
- **dnp3: bound the maximum number of objects per tx** (bdbc38b)
- **dnp3: set a bound on the number of points per message** (c03a8db)
- **dnp3: reduce flood threshold to 32 and make configurable** (377c8fd)
- **dnp3: check done state, not complete state for progress** (50cac2e)
- **dcerpc: use saturating_add to count fragments** (b24db73)
- **http: limit the number of folded lines per header** (018a377)
- **detect/alert: check alert queue capacity before expanding** (549d7bf)
- **http: do not use recursion in decompression** (0dddac7)
- **output: use tx iterator for finding alert http xff** (17c8eb4)
- **output: optimize loop for finding alert http xff** (754c4e9)
- **datasets: allocates on the heap if string base64 is long** (d767dfa)
- **datasets: explicitly errors on too long string** (32a1b9a)
- **eve/tls: log client version if no server hello seen** (a81f8b7)
- **detect/xbits: parse keywords w strtok_r** (5eb629c)
- **rust/psl: update to 2.1.175** (98959d9)
- **flow: swap MACs when flow direction is swapped** (183b826)
- **detect/lua: exclude script setup from the max-bytes limit** (d421706)
- **detect/luaxform: disable bytes limit during setup** (cf6c79c)
- **lua/sandbox: allow disabling the bytes limit** (761862f)
- **tcp/tfo: set PKT_STREAM_EST flag** (23862ea)
- **http: do not use a loop to find the tx count** (3f0725b)
- **userguide: highlight exceptions interactions** (a1f59cb)
- **doc/luaxform: Clarify luaxform calling convention** (8e75f21)
- **mpm: remove remaining ac-bs references** (fb1d52f)
- **doc/af-packet: document disable-hwtimestamp option** (c9b730a)
- **app-layer: only register flow counter for detection-only** (6aa4659)
- **unix-socket: don't doubly setup stats private area** (6ba11cd)
- **counters: minor code cleanup** (b599718)
- **counters: remove unused id var in local stats counter** (dac48f5)
- **decode: register decoder.erspan and decoder.nsh counters correctly** (6c3fe54)
- **detect/ssl: properly handle negation in ssl_version keyword** (2f9762c)
- **devguide: update backports policy for Suricata 7.0** (c2e82ec)
- **schema: allow stats.stream event counters** (7bd22f4)
- **schema/stats: flow_mgr is actually flow.mgr** (4824df3)
- **doc: remove remaining references to pruned flows** (a763121)
- **pop3: AUTH command handling improvements** (8d93353)
- **pop3: count retr_data into consumed** (f1e1acf)
- **pop3: improve parsing** (20f1472)
- **fuzz/conf: bail out on long sequence of scalars** (da8e37b)
- **doc/luaxform: Remove init function from example** (9fa7756)
- **version: start development towards 8.0.3** (2cfc2f4)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/OISF/suricata?utm_source=github-action)._