Open Information Security Foundation

Today

VJ 06:38 AM Suricata Feature #8392 (Closed): firewall: support FTP hook states for firewall rule evaluation

Victor Julien

07/04/2026

VJ 05:43 AM Suricata Bug #8717 (Resolved): rdp: transaction id handling can cause skips in tx cleanup

https://github.com/OISF/suricata/pull/15789 Victor Julien

VJ 05:42 AM Suricata Task #8720 (Closed): dcerpc: tx id handling should match other applayer parsers

https://github.com/OISF/suricata/pull/15789 Victor Julien

VJ 05:42 AM Suricata Bug #8704 (Resolved): af-packet: eBPF map location error never printed

https://github.com/OISF/suricata/pull/15789 Victor Julien

VJ 05:41 AM Suricata Bug #8710 (Resolved): flow-manager: no flow timeout with flow.hash-size < 10

https://github.com/OISF/suricata/pull/15789 Victor Julien

VJ 05:40 AM Suricata Bug #8698 (Resolved): firewall: non-sequential tx causes issues

https://github.com/OISF/suricata/pull/15789 Victor Julien

07/03/2026

VJ 07:37 AM Suricata Task #8718 (Assigned): firewall: fuzz target

Firewall code has lots of DEBUG_VALIDATE_BUG_ON's everywhere, so a fuzz target specifically for trying to trigger these (and regular crashes) would be good to have.
Thinking of a variant of sigpcap that is set up to create a firewall ... Victor Julien

VJ 07:05 AM Suricata Bug #8717 (In Review): rdp: transaction id handling can cause skips in tx cleanup

https://github.com/OISF/suricata/pull/15781 Victor Julien

VJ 06:05 AM Suricata Bug #8717 (Resolved): rdp: transaction id handling can cause skips in tx cleanup

> RDP can skip cleanup because its id convention does not match the generic Rust iterator. The generic iterator in applayer.rs returns tx.id() - 1, and cleanup trusts that id when calling StateTransactionFree in app-layer-parser.c. RDP r... Victor Julien

VJ 07:04 AM Suricata Bug #8698 (In Review): firewall: non-sequential tx causes issues

https://github.com/OISF/suricata/pull/15781 Victor Julien