Open Information Security Foundation

05/13/2026

JI 10:34 PM Suricata Feature #8544 (In Review): firewall: source field in alert/drop events to distinguish firewall from IDS/IPS (8.0.x backport)

Pull request: https://github.com/OISF/suricata/pull/15385 Jason Ish

JI 04:21 PM Suricata Bug #8560: detect: NULL dereference in rate filter callback registration

Philippe Antoine wrote in #note-1:
> Jason, what do you think of this ticket ? Real issue ?
I'm curious if this is actually reachable in a real-world scenario. Jason Ish

JI 04:20 PM Suricata Bug #8560 (In Review): detect: NULL dereference in rate filter callback registration

A PR for review has been submitted: https://github.com/OISF/suricata/pull/15380 Jason Ish

05/08/2026

JI 10:21 PM Suricata Task #8549 (Feedback): http: consider making extended the default

Currently @extended@ is enabled in the default configuration file, but this is not the default if that field is commented out. We should consider removing this option and just log in extended mode all the time.
When not in extended mo... Jason Ish

05/07/2026

JI 09:41 PM Suricata Feature #8456 (In Review): firewall: source field in alert/drop events to distinguish firewall from IDS/IPS

Pull request: https://github.com/OISF/suricata/pull/15335 Jason Ish

JI 09:31 PM Suricata Feature #8456 (In Progress): firewall: source field in alert/drop events to distinguish firewall from IDS/IPS

Jason Ish

JI 08:58 PM Suricata Feature #8456 (Assigned): firewall: source field in alert/drop events to distinguish firewall from IDS/IPS

Just a note that @alert.source@ is already a used field, when a rule uses the @target@ keyword. For example: Jason Ish

05/06/2026

JI 09:43 PM Suricata Feature #8538 (In Review): dhcp: support option 52 overload

Reported by APEvul:
Per RFC 2131, when Option 52 is present, the BOOTP `sname` (64 bytes) and/or `file` (128 bytes) fields may contain additional DHCP options and should be treated as continuation areas for option parsing. In my testi... Jason Ish

JI 09:00 PM Suricata Task #7745: rust: set new minimum Rust version for Suricata 9.0

@vjulien Do you recall what we mean by the *Supported* column? Jason Ish

JI 08:00 PM Suricata Feature #8533 (Closed): ntp: add lua bindings for ntp transactions

Merged. Jason Ish