Open Information Security Foundation

09/24/2026

JI 10:01 PM Suricata Bug #9126: detect: byte_extract/byte_math values silently miscomputed via unchecked 64-to-32-bit truncation, enabling signature evasion

Suricata-Verify pull request: https://github.com/OISF/suricata-verify/pull/3390 Jason Ish

09/23/2026

JI 11:33 PM Suricata Bug #9126 (New): detect: byte_extract/byte_math values silently miscomputed via unchecked 64-to-32-bit truncation, enabling signature evasion

h2. DISCLOSURE UP FRONT
I want to be transparent before describing the issue. The truncation behavior itself is already documented in your source tree. The file src/detect-engine-content-inspection.c contains the developer comment "Th... Jason Ish

JI 02:57 PM Suricata-Update Bug #9113 (Assigned): cache/ directory accumulates stale rule-source tarballs when a source URL is version-templated (e.g. et/open)

Jason Ish

09/22/2026

JI 09:56 PM Suricata Bug #9112 (Triaged): multi-tenant: reload-tenants races on config tree and can deadlock

SV test: https://github.com/OISF/suricata-verify/pull/3386 Jason Ish

JI 09:25 PM Suricata Bug #9112 (Triaged): multi-tenant: reload-tenants races on config tree and can deadlock

The @reload-tenants@ unix-socket command has two threading bugs.
*1. Config tree race.* Each detect loader thread loads its tenant's YAML with @SCConfYamlLoadFileWithPrefix()@, in parallel, into the global config tree, which has no lo... Jason Ish

JI 07:55 PM Suricata Feature #7283 (Closed): installing suricatasc functionality without installing suricata entirely

The old Python suricatasc can be downloaded separately here: https://github.com/jasonish/python-suricatasc
The new Python one can be installed with @cargo@, @cargo install suricatasc@. However, the easiest way to get it will be in the... Jason Ish

JI 07:52 PM Suricata Support #8082: Support: What APIs should be used for Suricata as a library in runmode=live

@Indira Are you still having issues here? Jason Ish

JI 07:22 PM Suricata Optimization #2627: lua: load script from same location as rule file if not in default rule location

Philippe Antoine wrote in #note-7:
> @jish is this still a problem ?
Not sure. Will need to be tested.
Jason Ish

09/18/2026

JI 04:58 AM Suricata Feature #776 (Closed): rules: Add smtp_envelope and smtp_header keywords

Closing. Suricata 8.0.7 has keywords that cover the envelope like:
- smtp.helo
- smtp.mail_from
- smtp.rcpt_to
Along with frame for more raw access, see: https://docs.suricata.io/en/suricata-8.0.7/rules/smtp-keywords.html
As f... Jason Ish

09/16/2026

JI 09:32 PM Suricata Task #8382 (Closed): rust: update minimum rust version to 1.85

Jason Ish