Project

General

Profile

6.0.0beta1

closed

08/06/2020

100%

169 issues   (169 closed — 0 open)

Issues by
Bug

91/91
Feature

34/34
Optimization

30/30
Task

13/13
Documentation

1/1
Related issues
Bug #2506: filestore v1: with stream-depth not null, files are never truncated Actions
Bug #2525: Add VLAN support to reject feature Actions
Bug #2639: Alert for tcp rules with established without 3whs Actions
Bug #2726: writing large number of json events on high speed traffic results in packet drops Actions
Bug #2737: Invalid memory read on malformed rule with Lua script Actions
Bug #3053: Replace atoi with StringParse* for better error handling Actions
Bug #3078: flow-timeout: check that 'emergency' settings are < normal settings Actions
Bug #3096: random failures on sip and http-evader suricata-verify tests Actions
Bug #3107: Thread counter setting ignored within affinity section Actions
Bug #3108: Calculation of threads in autofp mode is wrong Actions
Bug #3188: Use FatalError wherever possible Actions
Bug #3265: Dropping privileges does not work with NFLOG Actions
Bug #3282: --list-app-layer-protos only uses default suricata.yaml location. Actions
Bug #3283: bitmask option of payload-keyword byte_test not working Actions
Bug #3339: Missing community ID in smb, rdp, tftp, dhcp Actions
Bug #3378: ftp: asan detects leaks of expectations Actions
Bug #3435: afl: Compile/make fails on openSUSE Leap-15.1 Actions
Bug #3441: alerts: missing rdp and snmp metadata Actions
Bug #3451: gcc10: compilation failure unless -fcommon is supplied Actions
Bug #3463: Faulty signature with two threshold keywords does not generate an error and never match Actions
Bug #3465: build-info and configure wrongly display libnss status Actions
Bug #3468: BUG_ON(strcasecmp(str, "any") in DetectAddressParseString Actions
Bug #3476: datasets: Dataset not working in unix socket mode Actions
Bug #3483: SIP: Input not parsed when header values contain trailing spaces Actions
Bug #3486: Make Rust probing parsers optional Actions
Bug #3489: rule parsing: memory leaks Actions
Bug #3490: Segfault when facing malformed SNMP rules Actions
Bug #3496: defrag: asan issue Actions
Bug #3504: http.header.raw prematurely truncates in some conditions Actions
Bug #3509: Behavior for tcp fastopen Actions
Bug #3517: Convert DER parser to Rust Actions
Bug #3519: FTP: Incorrect ftp_memuse calculation. Actions
Bug #3522: TCP Fast Open - Bypass of stateless alerts Actions
Bug #3523: Suricata does not log alert metadata info when running in unix-socket mode Actions
Bug #3525: Kerberos vulnerable to TCP splitting evasion Actions
Bug #3529: rust: smb compile warnings Actions
Bug #3532: Skip over ERF_TYPE_META records Actions
Bug #3547: file logging: complete files sometimes marked 'TRUNCATED' Actions
Bug #3565: ssl/tls: ASAN issue in SSLv3ParseHandshakeType Actions
Bug #3566: rules: minor memory leak involving pcre_get_substring Actions
Bug #3567: rules/bsize: memory issue during parsing Actions
Bug #3568: rules: bad rule leads to memory exhaustion Actions
Bug #3569: fuzz: memory leak in bidir rules Actions
Bug #3570: rfb: invalid AppLayerResult use Actions
Bug #3583: rules: missing 'consumption' of transforms before pkt_data would lead to crash Actions
Bug #3584: rules: crash on 'internal'-only keywords Actions
Bug #3586: rules: bad address block leads to stack exhaustion Actions
Bug #3593: Stack overflow when parsing ERF file Actions
Bug #3594: rules: memory leaks in pktvar keyword Actions
Bug #3595: sslv3: asan detects leaks Actions
Bug #3615: Protocol detection evasion by packet splitting Actions
Bug #3628: Incorrect ASN.1 long form length parsing Actions
Bug #3630: Recursion stack-overflow in parsing YAML configuration Actions
Bug #3631: FTP response buffering against TCP stream Actions
Bug #3632: rules: memory leaks on failed rules Actions
Bug #3638: TOS IP Keyword not triggering an alert Actions
Bug #3640: coverity: leak in fast.log setup error path Actions
Bug #3641: coverity: data directory handling issues Actions
Bug #3642: RFB parser wrongly handles incomplete data Actions
Bug #3643: Libhtp request: extra whitespace interpreted as dummy new request Actions
Bug #3654: Rules reload with Napatech can hang Suricata UNIX manager process Actions
Bug #3657: Multiple DetectEngineReload and bad insertion into linked list lead to buffer overflow Actions
Bug #3662: Signature with an IP range creates one IPOnlyCIDRItem by IP address Actions
Bug #3677: Segfault on SMTP TLS Actions
Bug #3680: Dataset reputation invalid value logging Actions
Bug #3683: rules: memory leak on bad rule Actions
Bug #3687: Null dereference in DetectEngineSignatureIsDuplicate Actions
Bug #3689: Protocol detection evasion by packet splitting on enip/nfs Actions
Bug #3690: eve.json windows timestamp field has "Eastern Daylight Time" appended to timestamp Actions
Bug #3699: smb: post-GAP file handling Actions
Bug #3700: nfs: post-GAP file handling Actions
Bug #3720: Incorrect handling of ASN1 relative_offset keyword Actions
Bug #3732: filemagic logging resulting in performance hit Actions
Bug #3749: redis: Reconnect is invalid in batch mode Actions
Bug #3750: redis: no or delayed data in low speed network Actions
Bug #3779: Exit on signature with invalid transform pcrexform Actions
Bug #3782: Once Suricata enters emergency mode it doe not recover properly Actions
Bug #3783: Stack overflow in DetectFlowbitsAnalyze Actions
Bug #3802: Rule filename mutation when reading file hash files from a directory other than the default-rule-directory Actions
Bug #3808: pfring: compile warnings Actions
Bug #3814: Coverity scan issue -- null pointer deref in ftp logger Actions
Bug #3815: Coverity scan issue -- control flow issue ftp logger Actions
Bug #3817: Coverity scan issue -- resource leak in filestore output logger Actions
Bug #3818: Coverity scan issue -- null pointer deref in detect engine Actions
Bug #3820: ssh: invalid use to 'AppLayerResult::incomplete` Actions
Bug #3821: Memory leak in signature parsing with keyword rfb.secresult Actions
Bug #3822: Rust panic at DCERPC signature parsing Actions
Bug #3840: Integer overflow in DetectContentPropagateLimits leading to unintended signature behavior Actions
Bug #3841: Heap-buffer-overflow READ 8 ยท DetectGetLastSMByListId Actions
Bug #3851: Invalid DNS incomplete result Actions
Bug #3855: mqtt: coverity static analysis issues Actions
Feature #641: Flowbits group for ORing Actions
Feature #962: Can I log the mac address of the source? Actions
Feature #1274: ssh events Actions
Feature #1807: Cisco HDLC Decoder Actions
Feature #1947: HTTP2 decoder Actions
Feature #2015: eve: add fileinfo in alert Actions
Feature #2196: Add flow_id to the file extracted .meta file Actions
Feature #2311: math on extracted values Actions
Feature #2312: http: parsing for async streams Actions
Feature #2363: pcap: read directories recursively Actions
Feature #2385: deprecate: unified2 Actions
Feature #2524: Allow user to choose the reject iface Actions
Feature #2553: support 'by_both' in threshold rule keyword Actions
Feature #2694: thresholding: feature parity between global and per-rule options Actions
Feature #2698: hassh and hasshServer for ssh fingerprinting Actions
Feature #2859: Oss-fuzz integration Actions
Feature #3199: transformation should be able to take options Actions
Feature #3200: pcre: allow operation as transform Actions
Feature #3293: eve: per thread output files Actions
Feature #3332: Dynamic Loadable Module/Plugin Support Actions
Feature #3422: GRE ERSPAN Type 1 Support Actions
Feature #3444: app-layer: signal stream engine about expected data size Actions
Feature #3445: Convert SSH parser to Rust Actions
Feature #3501: Add RFB parser Actions
Feature #3546: Teredo port configuration Actions
Feature #3549: Add MQTT parser Actions
Feature #3626: implement from_end byte_jump keyword Actions
Feature #3635: datasets: add 'dataset-remove' unix command Actions
Feature #3661: validate strip_whitespace content before loading a rule Actions
Feature #3693: DCERPC multi tx support Actions
Feature #3694: DCERPC logging support Actions
Feature #3733: Add unix socket support in redis logging Actions
Feature #3760: datasets: distinguish between 'static' and 'dynamic' sets Actions
Feature #3823: conditional logging: tx log filtering Actions
Optimization #749: pcre 8.32 introduces JIT pcre_jit_exec(...) Actions
Optimization #947: dynamic allocation of thread queues Actions
Optimization #1038: Flow Queue should be a stack Actions
Optimization #2779: Convert DCE_RPC from C to Rust Actions
Optimization #2845: Counters for kernel_packets decreases at times without restart Actions
Optimization #2977: replace asn1 parser with rust based implementation Actions
Optimization #3234: dns app-layer c vs rust cleanup Actions
Optimization #3308: rust: use cbindgen to generate bindings Actions
Optimization #3538: dns: use app-layer incomplete support Actions
Optimization #3539: rdp: use app-layer incomplete support Actions
Optimization #3541: applayertemplate: use app-layer incomplete support Actions
Optimization #3655: default to c11 standard Actions
Optimization #3708: Convert SSH logging to JsonBuilder Actions
Optimization #3709: Convert DNP3 logging to JsonBuilder Actions
Optimization #3710: Convert SMTP logging to JsonBuilder Actions
Optimization #3711: Convert NFS logging to JsonBuilder Actions
Optimization #3712: Convert SMB logging to JsonBuilder Actions
Optimization #3713: Convert RFB logging to JsonBuilder Actions
Optimization #3714: Convert FTP logging to JsonBuilder Actions
Optimization #3715: Convert RDP logging to JsonBuilder Actions
Optimization #3716: Use uuid crate wherever possible in smb rust parser Actions
Optimization #3754: Convert KRB to JsonBuilder Actions
Optimization #3755: Convert IKEv2 to JsonBuilder Actions
Optimization #3756: Convert SNMP to JsonBuilder Actions
Optimization #3757: Convert Netflow to JsonBuilder Actions
Optimization #3764: Convert TFTP to JsonBuilder Actions
Optimization #3765: Convert Templates to JsonBuilder Actions
Optimization #3773: DNP3 CRC disabled when fuzzing Actions
Optimization #3838: Convert 'vars' (metadata logging) to JsonBuilder Actions
Optimization #3839: Convert profiling rule match dumps to JsonBuilder Actions
Task #2381: deprecate: 'drop' log output Actions
Task #2959: deprecate: filestore v1 Actions
Task #3128: nom 5 Actions
Task #3167: convert all _Bool use to bool Actions
Task #3255: rdp: enable by default Actions
Task #3256: sip: enable by default Actions
Task #3331: Rust: Move to 2018 Edition Actions
Task #3344: devguide: setup sphinx Actions
Task #3408: FTP should place constraints on filename lengths Actions
Task #3409: SMTP should place restraints on variable length items (e.g., filenames) Actions
Task #3460: autotools: check autoscan output Actions
Task #3515: GRE ERSPAN Type 1 Support configuration Actions
Task #3564: dcerpc: support GAP recovery Actions
Documentation #3335: doc: add ipv4.hdr and ipv6.hdr Actions

Also available in: TXT