The config/suricata/suricata-report-cron file is not copied to /usr/bin/ in tge lfs. This means that the old version from the tarball is used and all updates to ghe fike since mid 2025 are not provided.
Patch submitted to copy across the correct suricata-report-cron from the ipfire-2.x config/suricata/ directory https://lists.ipfire.org/development/20260910131751.151378-1-adolf.belka@ipfire.org/T/#t https://patchwork.ipfire.org/project/ipfire/list/?series=6136
Patch has been merged into next (CU205) https://git.ipfire.org/?p=ipfire-2.x.git;a=commit;h=5dbc14f22e2681337e19ab65ebf2cda8d8365d00