Project

General

Profile

8.0.8

open

Due in 13 days (10/29/2026)

60%

35 issues   (21 closed — 14 open)

Issues by
Bug

16/25
Feature

0/1
Task

1/3
Documentation

4/4
Security

0/2
Related issues
LS Bug #7926: flow/memcap: too low setting causes crash (8.0.x backport) Actions
JF Bug #8350: pgsql: disable parser by default (8.0.x backport) Actions
VJ Bug #8352: openbsd: race condition between pledge and pcap directory mode (8.0.x backport) Actions
PA Bug #9044: pppoe: 1-byte out-of-bounds read of PPPoE Session protocol field when packet is exactly PPPOE_SESSION_HEADER_MIN_LEN (7) bytes (8.0.x backport) Actions
PA Bug #9045: decode/ipv6: OOB read with Hop-by-Hop and Destination Options extension headers (8.0.x backport) Actions
PA Bug #9090: mpm: AC-KS large-table search truncates 32-bit state to uint16_t before output lookup → detection bypass / OOB read (8.0.x backport) Actions
PA Bug #9091: mpm: AC-KS delta-table allocation size computed in signed int can overflow (8.0.x backport) Actions
PA Bug #9092: mpm/ac: detection bypass while loading over 64k case-sensitive patterns (8.0.x backport) Actions
PA Bug #9093: config: use after free when include sequence redefines parent of dotted key (8.0.x backport) Actions
SB Bug #9108: datasets: type ip rejects standard IPv4 addresses (8.0.x backport) Actions
VJ Bug #9110: firewall: reject action to send TCP RST / ICMP unreachable (8.0.x backport) Actions
VJ Bug #9127: firewall: file.data auto-prior-accept bypass (8.0.x backport) Actions
JI Bug #9138: detect/analyzer: Empty rules_fast_pattern.txt (8.0.x backport) Actions
VJ Bug #9142: IPS: long-lived TLS flow dropped with "applayer error" (tls.gap) at exactly 2^32 + 2^31 + stream.reassembly.depth bytes (8.0.x backport) Actions
PA Bug #9143: http1: 100-continue based inspection bypass of http.stat_code (8.0.x backport) Actions
VJ Bug #9147: flow/timeout: race condition in flow timeout handling causing missing logs (8.0.x backport) Actions
PA Bug #9156: smtp: max-tx applies to cumulative tx count, not concurrent (8.0.x backport) Actions
OD Bug #9159: ftp: completion_code missing and code logged as reply when the response message is empty in (8.0.x backport) Actions
VJ Bug #9169: stats: race condition causes missing stats in short pcap runs (8.0.x backport) Actions
SB Bug #9171: detect/iponly: dotted netmask addresses match 0.0.0.0/N instead of network (8.0.x backport) Actions
JI Bug #9177: pv->current_file left dangling in pcap directory mode (8.0.x backport) Actions
OD Bug #9199: http: mid-body TCP gap in a fixed-length gzip response disables HTTP parsing for the rest of the connection (8.0.x backport) Actions
PA Bug #9218: http2: progress advancing too quickly on END_STREAM without END_HEADERS (8.0.x backport) Actions
VJ Bug #9222: detect: bidirectional rule alerts on its toserver half when the toserver buffer has the higher progress (8.0.x backport) Actions
VJ Bug #9223: detect: memory leaks in the alert output (8.0.x backport) Actions
JI Feature #9179: rules: flow.elephant keyword (8.0.x backport) Actions
JI Task #9031: rust: update psl crate (pre 8.0.8 update) (8.0.x backport) Actions
JF Task #9042: firewall: do not support config keyword from TD rules (8.0.x backport) Actions
JF Task #9098: clang-format: miscelaneous fixes (8.0.x backport) Actions
OD Documentation #7945: doc/actions: clarify 'pass' scope variations (8.0.x backport) Actions
OD Documentation #7946: userguide: add section on SMTP event type (8.0.x backport) Actions
OD Documentation #7947: doc/configuration: clarify sig_id & gid_id for global threshold (8.0.x backport) Actions
JF Documentation #9124: userguide: clarify thresholding workings (8.0.x backport) Actions
PA Security #9107: datasets: load can block and oom on /dev/zero (8.0.x backport) Actions
OD Security #9131: vlan: PacketReinit() leaves vlan_id[2] stale on packet-pool recycle, splitting flows and enabling multi-segment rule evasion (8.0.x backport) Actions

Also available in: TXT