Open Information Security Foundation

Today

PA 03:23 PM Suricata Bug #8845 (Closed): detect: undefined behavior on OOB rvalue with byte_math

Philippe Antoine

PA 03:23 PM Suricata Bug #8902 (Closed): detect: undefined behavior on OOB rvalue with byte_math (8.0.x backport)

https://github.com/OISF/suricata/pull/16143 Philippe Antoine

09/01/2026

PA 06:45 PM Suricata Bug #8820 (Resolved): mpm/ac: detection bypass while loading over 64k case-sensitive patterns

https://github.com/OISF/suricata/pull/16136 Philippe Antoine

PA 06:45 PM Suricata Bug #8841 (Resolved): mpm: AC-KS large-table search truncates 32-bit state to uint16_t before output lookup → detection bypass / OOB read

https://github.com/OISF/suricata/pull/16136 Philippe Antoine

PA 06:45 PM Suricata Security #8860 (Resolved): nfs: detection bypass due to incorrect handling of SECINFO_NO_NAME

https://github.com/OISF/suricata/pull/16136 Philippe Antoine

PA 06:43 PM Suricata Security #8963 (In Review): http2: IPv6 authority truncation bypasses normalized host policy (8.0.x backport)

Backport PR: https://github.com/OISF/suricata/pull/16158 Philippe Antoine

PA 01:05 PM Suricata Bug #8846 (Resolved): unwind: OOB write in case of deep call stack

https://github.com/OISF/suricata/pull/16144 Philippe Antoine

PA 09:23 AM Suricata Bug #8856 (Resolved): pppoe: 1-byte out-of-bounds read of PPPoE Session protocol field when packet is exactly PPPOE_SESSION_HEADER_MIN_LEN (7) bytes

https://github.com/OISF/suricata/pull/16102 Philippe Antoine

PA 09:22 AM Suricata Security #8778 (Resolved): http2: IPv6 authority truncation bypasses normalized host policy

https://github.com/OISF/suricata/pull/16128 Philippe Antoine

08/31/2026

PA 01:47 PM Suricata Bug #6735 (Closed): setting variables with --set leads to segfault

Philippe Antoine