Project

General

Profile

7.0.0-rc1

closed

01/31/2023

100%

118 issues   (118 closed — 0 open)

Issues by
Bug

53/53
Feature

15/15
Optimization

20/20
Task

18/18
Documentation

7/7
Security

5/5
Related issues
Bug #2982: invalid dsize distance rule being loaded by suricata Actions
Bug #3253: tls: handling of 'Not Before' date before unix epoch Actions
Bug #3780: Negated content with distance FP Actions
Bug #4554: Configuration test mode succeeds when classification.config file contains invalid content Actions
Bug #4580: smb: large streams can cause large memory moves (memmove) Actions
Bug #5161: smb: file not tracked on smb2 async Actions
Bug #5198: eve/stats: ASAN error when eve output file can't be opened. Actions
Bug #5205: FTP-data unrecognized depending on multi-threading Actions
Bug #5235: ftp: add event when command request or response is too long Actions
Bug #5258: smb/ntlmssp: parser incorrectly assumes fixed field order Actions
Bug #5374: pcap-log: breaking change in file names Actions
Bug #5379: detect/udp: different detection from rules when UDP/TCP header is broken Actions
Bug #5444: dns: allow dns messages with invalid opcodes Actions
Bug #5456: detect: config keyword prevents tx cleanup Actions
Bug #5528: tcp: assertion failed in function DoInsertSegment Actions
Bug #5529: frame: memory leak in signature parsing Actions
Bug #5530: frames: buffer overflow in signatures parsing Actions
Bug #5553: dpdk: Packets with invalid checksums are not counted in DPDK capture mode Actions
Bug #5557: dcerpc: rust integer underflow Actions
Bug #5558: detect: invalid hex character in content leads to bad debug message Actions
Bug #5564: tls: buffer overread Actions
Bug #5567: smb: failed assertion (!((f->alproto == ALPROTO_SMB && txd->files_logged != 0))), function CloseFile, file output-file.c Actions
Bug #5572: pcre2: allow different include/lib paths Actions
Bug #5574: base64: skip over all invalid characters for RFC 2045 mode Actions
Bug #5579: pgsql: support out of order parameter in startup message Actions
Bug #5580: dpdk: IDS vs IPS confusion Actions
Bug #5582: dpdk: iface shortening for pcie addresses Actions
Bug #5617: dpdk: avoid per thread warnings Actions
Bug #5624: quic: rule with ja3.hash keyword fails to load Actions
Bug #5625: FlowSwapFileFlags function is incorrect Actions
Bug #5637: quic: convert to vecdeque Actions
Bug #5644: Integer overflow at dcerpc.rs:846 Actions
Bug #5654: readthedocs: not showing pdf download option for recent versions Actions
Bug #5658: SMTP: segfault on boundary data Actions
Bug #5661: security.limit-noproc: break ASAN/LSAN when non-root user Actions
Bug #5663: tls: buffer overhead off by one in TLSDecodeHSHelloExtensionSupportedVersions Actions
Bug #5691: HTTP/2 decompression bug Actions
Bug #5693: decode: Padded packet to minimal Ethernet length marked with invalid length event Actions
Bug #5706: app-layer-htp: Condition depending on enabled IPS mode never true Actions
Bug #5707: quic: ja3 Stack-use-after-return READ 1 Actions
Bug #5725: smtp: quoted-printable encoding skips empty lines in files Actions
Bug #5747: iprep/ipv6: warning issued on valid reputation input Actions
Bug #5753: smb: convert transaction list to vecdeque Actions
Bug #5765: exceptions: midstream flows are dropped if midstream=true && stream.midstream-policy=drop-flow Actions
Bug #5769: Incomplete values for .stats."app_layer".flow.proto Actions
Bug #5777: tcp: leak in lossy traffic Actions
Bug #5779: dcerpc: max-tx config parameter Actions
Bug #5781: smb: unbounded file chunk queuing after gap Actions
Bug #5811: smb: tx logs sometimes have duplicate `tree_id` output Actions
Bug #5813: rfb/eve: depth in pixel format logged twice Actions
Bug #5814: smb: duplicate interface fields logged Actions
Bug #5817: tls: certificates with dates prior to 1970 are not logged correctly Actions
Bug #5922: Building on Fedora 37 Produces Warning Actions
Feature #2497: error messages usability improvement Actions
Feature #3086: app_proto for Torrent traffic Actions
Feature #3306: Support AF_XDP capture method Actions
Feature #3912: yaml: --include <yaml> commandline option Actions
Feature #4269: Additional dataset operations Actions
Feature #4751: dns/eve: add 'HTTPS' type logging Actions
Feature #4783: config/yaml: Allow fully qualified configuration keys (top.sub.sub: value) Actions
Feature #4979: frames: implement dynamic logic to disable frames of a type Actions
Feature #4981: frames: add general <app_proto>.stream frames Actions
Feature #5184: Add more dataset user interaction Actions
Feature #5219: ips: add 'master switch' to enable dropping on traffic (handling) exceptions Actions
Feature #5383: Support for IP addresses in dataset Actions
Feature #5384: Thread Synchronisation: wait for all threads to be in an operating state before continuing initialisation Actions
Feature #5516: tls: client cert detection Actions
Feature #5761: Unknown ethertype packets are not counted Actions
Optimization #3160: clean up error codes Actions
Optimization #4591: Fix Rust clippy lints Actions
Optimization #4592: Fix warning about "for loop over fallibles" Actions
Optimization #4594: Fix warning about "this loop never actually loops" Actions
Optimization #4596: Fix warning about "single match" Actions
Optimization #4598: Fix warning about "needless_range_loop" Actions
Optimization #4600: Fix warning about "needless lifetimes" Actions
Optimization #4601: Fix warning about "while let loop" Actions
Optimization #4602: Fix warning about "new without default" Actions
Optimization #4603: Fix warning about "type complexity" Actions
Optimization #4606: Fix warning about "match ref pats" Actions
Optimization #4608: Fix warning about "redundant pattern matching" Actions
Optimization #4610: Fix warning about "explicit counter loop" Actions
Optimization #4611: Fix warning about "extra unused lifetimes" Actions
Optimization #4612: Fix warning about "nonminimal bool" Actions
Optimization #4614: Fix warning about "field reassign with default" Actions
Optimization #4908: ftp: use AppLayerResult instead of buffering wherever possible Actions
Optimization #4977: frames: gap handling in inspection Actions
Optimization #5373: Prevent process creation by Suricata process Actions
Optimization #5782: smb: set defaults for file chunk limits Actions
Task #4019: Convert unittests to new FAIL/PASS API - detect-detection-filter.c Actions
Task #4020: Convert unittests to new FAIL/PASS API - detect-distance.c Actions
Task #4029: Convert unittests to new FAIL/PASS API: detect-engine-sigorder.c Actions
Task #4030: Convert unittests to new FAIL/PASS API: detect-engine-tag.c Actions
Task #4039: Convert unittests to new FAIL/PASS API: detect-filesize.c Actions
Task #4042: Convert unittests to new FAIL/PASS API: detect-icmp-id.c Actions
Task #4043: Convert unittests to new FAIL/PASS API: detect-icmp-seq.c Actions
Task #4049: Convert unittests to new FAIL/PASS API: detect-itype.c Actions
Task #4050: Convert unittests to new FAIL/PASS API: detect-l3proto.c Actions
Task #4054: Convert unittests to new FAIL/PASS API: detect-replace.c Actions
Task #4939: app-layer: template and setup script Actions
Task #5496: detect/parse: add tests for parsing signatures with reject and drop action Actions
Task #5504: exceptions: error out when invalid configuration value is passed Actions
Task #5586: rust/applayertemplate: remove pub and no_mangle from extern functions that don't need it Actions
Task #5587: ips/tap: in layer 2 ips/tap setups, warn that mixed usage of ips and tap will be removed in 8.0 Actions
Task #5632: Disable swf decompression by default Actions
Task #5638: SWF decompression: Do not depend on libhtp Actions
Task #5742: rust/src/mqtt: add unittests for key parsers Actions
Documentation #4697: devguide: document app-layer frame support Actions
Documentation #4929: devguide: bring Contributing process page into it Actions
Documentation #5129: devguide: clarify style guide for getframe functions Actions
Documentation #5512: userguide: add subsection about setting up Suri in IPS mode with Netmap Actions
Documentation #5515: userguide: add a dedicated chapter/section for the Exception Policies Actions
Documentation #5585: devguide: bring section about installation from redmine wiki into DevGuide Actions
Documentation #5616: Ubuntu PPA: Package software-properties-common Actions
Security #5623: smtp/base64: crash / memory corruption Actions
Security #5686: decoder/tunnel: tunnel depth not limited properly Actions
Security #5700: SCRealloc of large chunk crashes Suricata Actions
Security #5701: Suricata crashes while processing FTP Actions
Security #5703: smb: crash inside of streaming buffer Grow() Actions