Project

General

Profile

8.0.7

open

Due in 2 days (09/15/2026)

81%

58 issues   (47 closed — 11 open)

Issues by
Bug

32/39
Feature

5/5
Task

2/2
Documentation

1/1
Security

7/11
Related issues
VJ Bug #8314: firewall: rule language can't accept ARP (8.0.x) Actions
AK Bug #8474: flow: bypass manager checks for initializer instead of actual fn (8.0.x backport) Actions
VJ Bug #8618: threshold: seed only partially applied in IPv6 hash (8.0.x backport) Actions
AK Bug #8705: af-packet: eBPF map location error never printed (8.0.x backport) Actions
OD Bug #8706: util/file: fix integer overflow in file inspection window comparison (8.0.x backport) Actions
OD Bug #8708: app-layer/smtp: check return value of FileAppendData in raw extraction mode (8.0.x backport) Actions
JI Bug #8716: smtp: subsequent helo/ehlo should be treated like a rset (8.0.x backport) Actions
JI Bug #8730: smtp: trailing quit can create an empty transaction (8.0.x backport) Actions
PA Bug #8761: http2: content-encoding are case insensitive (8.0.x backport) Actions
JI Bug #8765: smtp: assertion on DATA reply without owning transaction (8.0.x backport) Actions
OD Bug #8771: Suricata 8.x does not show GRE tunnel source/destination in flow/alert logs (8.0.x backport) Actions
JL Bug #8773: defrag: memuse reported incorrectly (8.0.x backport) Actions
VJ Bug #8796: tls: incorrect looping logic leads to extensions pollution (8.0.x backport) Actions
SD Bug #8804: dag: Infinite loop in DAG record processing when rlen < dag_record_size (8.0.x backport) Actions
VJ Bug #8868: expectations: IPPair mutex/reference leak on malloc failure (8.0.x backport) Actions
PA Bug #8869: ippair: Memory leak caused by ippair processing (8.0.x backport) Actions
JI Bug #8876: smtp: complete BDAT transactions at LAST (8.0.x backport) Actions
SB Bug #8901: detect/iponly: detection bypass with ipv6 ranges (8.0.x backport) Actions
JL Bug #8902: detect: undefined behavior on OOB rvalue with byte_math (8.0.x backport) Actions
SB Bug #8911: flow/rate: underflow due to incorrect flushing of the ring (8.0.x backport) Actions
PA Bug #8912: frame: incorrect debug assertion triggered (8.0.x backport) Actions
VJ Bug #8926: tls: use-after-free of JA3 elliptic-curve buffers on malloc failure (8.0.x backport) Actions
VJ Bug #8928: smb1: unbounded vector growth in NEGOTIATE dialect list (8.0.x backport) Actions
VJ Bug #8934: nfs: large attacker-controlled memory allocation parsing NFSv4 LAYOUTGET reply (8.0.x backport) Actions
GL Bug #8935: dhcp: parser ignores the declared length of time options (8.0.x backport) Actions
GL Bug #8936: dhcp: parser never reports malformed options (8.0.x backport) Actions
VJ Bug #8942: setting variables with --set leads to segfault (8.0.x backport) Actions
LS Bug #8952: engine-analysis: packet:filter policy is hardcoded to drop:packet (8.0.x backport) Actions
LS Bug #8955: firewall: action scope not validated when inherited in multi-action rules (8.0.x backport) Actions
JL Bug #8976: unwind: OOB write in case of deep call stack (8.0.x backport) Actions
JI Bug #8996: smtp: rejected BDAT reply leaves parser in data mode (8.0.x backport) Actions
JL Bug #9011: detect: NULL deref in alert output when reference keyword uses undefined key (8.0.x backport) Actions
PA Bug #9014: util: undefined behavior in fallback memrchr implementation (8.0.x backport) Actions
SD Bug #9015: erf/file: Heap buffer overflow in ERF file reader via untrusted rlen field (8.0.x backport) Actions
SD Bug #9016: erf/file: sets packet length from unvalidated wlen, causing OOB heap read in decoder (8.0.x backport) Actions
SD Bug #9017: erf/file: ERF PAD and META type records and extension headers are not supported (8.0.x backport) Actions
LS Bug #9018: output: Double-free of prefix/sensor_name in threaded LogFileCtx teardown (8.0.x backport) Actions
JF Bug #9024: pgsql: use message type for transaction actions (8.0.x backport) Actions
GL Bug #9035: sip: protocol detection incorrectly matches ssdp traffic (8.0.x backport) Actions
VJ Feature #8729: firewall: allow single rule to accept protocol detection in progress and the final protocol (8.0.x backport) Actions
LS Feature #8770: firewall: add default app policy options (8.0.x backport) Actions
AA Feature #8879: datasets: add support for subdomain match (8.0.x backport) Actions
JI Feature #8904: firewall: support SMTP hook states for firewall rule evaluation (8.0.x backport) Actions
VJ Feature #9019: firewall: allow single packet rule to accept tcp connection (8.0.x backport) Actions
JI Task #8688: psl: crate should be updated on every release (8.0.x backport) Actions
CT Task #8703: detect-engine-mpm: adjust transforms->cnt type to unsigned integer (8.0.x backport) Actions
LS Documentation #8345: doc: update Rust install instructions (8.0.x backport) Actions
PA Security #8732: rfb: too long strings can cause log flooding (8.0.x backport) Actions
PA Security #8751: nfs: v3 READ attr_follows=0 file-data inspection bypass (8.0.x backport) Actions
PA Security #8769: datasets: buffer overread with too small hashes (8.0.x backport) Actions
VJ Security #8924: nfs: detection bypass due to incorrect handling of SECINFO_NO_NAME (8.0.x backport) Actions
VJ Security #8927: ssl: integer underflow due to miscalculation in SSLv2 CLIENT_HELLO (8.0.x backport) Actions
PA Security #8963: http2: IPv6 authority truncation bypasses normalized host policy (8.0.x backport) Actions
PA Security #8965: http2: Host-only requests bypass host inspection and inline policy (8.0.x backport) Actions
JI Security #8981: dnp3: framing errors stop transaction inspection for the flow (8.0.x backport) Actions
JI Security #8982: dnp3: link-layer events before first transaction are dropped (8.0.x backport) Actions
GL Security #8986: rdp: detection bypass due to infinite loop in MCS/CS processing T.123 TPKT payload (8.0.x backport) Actions
GL Security #8987: ssh: miscalculation due to oversized KEXINIT causes parser desync (8.0.x backport) Actions

Also available in: TXT