Open Information Security Foundation

10/29/2026

SB 02:05 AM Suricata Bug #4880 (Assigned): detect: hostbits and xbits rules incorrectly ordered

Shivani Bhardwaj

10/26/2026

SB 04:44 AM Suricata Bug #9277: Suricata: PCRE2 match-call work-limit return code -47 (behavior question)

Hello!
Thank you for all the questions. Just letting you know that questions are better asked and answered over our forum (more visibility, yay! :) ): https://forum.suricata.io/
Redmine is used better as a bug report/ticketing platform. Shivani Bhardwaj

10/21/2026

SB 05:22 AM Suricata Bug #9240 (In Review): dcerpc: broken stub_data reassembly makes multiple txs for same fragment

In Review PR: https://github.com/OISF/suricata/pull/16479 Shivani Bhardwaj

10/20/2026

SB 09:28 AM Suricata Bug #9240 (Resolved): dcerpc: broken stub_data reassembly makes multiple txs for same fragment

In DCERPC/TCP, broken stub_data reassembly ends up putting different fragments in different transactions. Shivani Bhardwaj

SB 09:03 AM Suricata Task #8692: tracking: detect: DCERPC keywords coverage

Stuart DC wrote in #note-12:
> Hi @unixia, i believe dcerpc.flags should operate on reassembled PDUs.
Hi @stu4rt ! Thanks a lot for confirming. Could you please clarify in such a case when should a match happen?
1. if each of the r... Shivani Bhardwaj

10/19/2026

SB 02:05 AM Suricata Bug #9171 (In Review): detect/iponly: dotted netmask addresses match 0.0.0.0/N instead of network (8.0.x backport)

In Review PR: https://github.com/OISF/suricata/pull/16462 Shivani Bhardwaj

SB 01:56 AM Suricata Bug #9166 (Resolved): detect/iponly: dotted netmask addresses match 0.0.0.0/N instead of network

Shivani Bhardwaj

10/10/2026

SB 09:31 AM Suricata Bug #9184 (Assigned): dcerpc/tcp: evasion if a gap is received

Shivani Bhardwaj

10/09/2026

SB 05:00 AM Suricata Bug #9170 (In Review): detect/iponly: threshold by_flow with a high count never alerts

In Review PR: https://github.com/OISF/suricata/pull/16415 Shivani Bhardwaj

SB 04:58 AM Suricata Bug #9166: detect/iponly: dotted netmask addresses match 0.0.0.0/N instead of network

Closed by PR: https://github.com/OISF/suricata/pull/16414 Shivani Bhardwaj