Open Information Security Foundation

Today

07:16 PM Suricata Bug #7546: dcerpc: parser does not take fraglen into account

Reassigning back to you as discussed, right Shivani ? Philippe Antoine

06:36 PM Suricata Bug #7735 (In Review): brotli: old crate version has integer underflow

https://github.com/OISF/suricata/pull/13358 Philippe Antoine

06:33 PM Suricata Bug #7735 (In Review): brotli: old crate version has integer underflow

Found by oss-fuzz:
https://issues.oss-fuzz.com/u/1/issues/421945527 Philippe Antoine

06:30 PM Suricata Optimization #7733 (In Review): transforms: move base64 transform pure rust

https://github.com/OISF/suricata/pull/13355 Philippe Antoine

07:15 AM Suricata Optimization #7733 (In Review): transforms: move base64 transform pure rust

Found by oss-fuzz:
https://issues.oss-fuzz.com/u/1/issues/418327946
Philippe Antoine

07:12 AM Suricata Bug #7732 (In Review): http1: use cursor wrapper handling EOF for brotli

https://github.com/OISF/suricata/pull/13354 Philippe Antoine

07:12 AM Suricata Bug #7732: http1: use cursor wrapper handling EOF for brotli

Goal is to avoid an endless loop in brotli crate Philippe Antoine

07:08 AM Suricata Bug #7732 (In Review): http1: use cursor wrapper handling EOF for brotli

Found by oss-fuzz and as is done for HTTP2
https://issues.oss-fuzz.com/u/1/issues/418282186
No need to backport Philippe Antoine

07:06 AM Suricata Bug #7730 (In Review): dcerpc: uint16 overflow (rust debug assertion)

https://github.com/OISF/suricata/pull/13353 Philippe Antoine

07:05 AM Suricata Bug #7730: dcerpc: uint16 overflow (rust debug assertion)

Variant analysis: only this one occurence found by oss-fuzz cf @git grep % rust | grep +@ Philippe Antoine