Open Information Security Foundation

10/14/2026

PA 08:47 AM Suricata Bug #9217 (In Review): http2: progress advancing too quickly on END_STREAM without END_HEADERS

https://github.com/OISF/suricata/pull/16440 Philippe Antoine

PA 07:44 AM Suricata Bug #9217 (In Review): http2: progress advancing too quickly on END_STREAM without END_HEADERS

As found by AI https://github.com/OISF/suricata/pull/16436#discussion_r4263618652
Can lead to evasion/FN Philippe Antoine

10/13/2026

PA 07:51 PM Suricata Bug #9184: dcerpc: TCP gap returns a parser error and disables app-layer inspection for the rest of the flow

> Requires packet loss at the sensor, which is not attacker-controlled.
Indeed so bug Philippe Antoine

PA 07:46 PM Suricata Bug #9186 (Assigned): http: gap before protocol detection permanently skips the HTTP request behind it

TCP gaps are not attacked controlled, so this is a bug Philippe Antoine

PA 07:41 PM Suricata Bug #9187 (Assigned): http1: splices a buffered line across a TCP gap into a request that was never contiguous

TCP gaps are not attacker controlled, so this is a bug Philippe Antoine

PA 07:38 PM Suricata Bug #9198: http: mid-body TCP gap in a fixed-length gzip response disables HTTP parsing for the rest of the connection

> Gap recovery issue, bug?
Correct for me Philippe Antoine

10/12/2026

PA 07:05 PM Suricata Optimization #9209 (In Review): http2: detect should not use &mut HTTP2Transaction

https://github.com/OISF/suricata/pull/16431 Philippe Antoine

10/11/2026

PA 08:28 PM Suricata Optimization #9209 (In Review): http2: detect should not use &mut HTTP2Transaction

See https://github.com/OISF/suricata/pull/16424#discussion_r4243078278 Philippe Antoine

PA 07:23 PM Suricata Bug #8256: detect: http.headers does not work on trailers when it is not fast_pattern

This is no longer blocking : https://github.com/OISF/suricata/pull/16407#issuecomment-6068227833 Philippe Antoine

PA 06:49 PM Suricata Optimization #9207 (Assigned): mime: event on duplicate token

Philippe Antoine