Project

General

Profile

5.0rc1

closed

09/24/2019

100%

107 issues   (107 closed — 0 open)

Issues by
Bug

54/54
Feature

34/34
Optimization

11/11
Task

6/6
Security

2/2
Related issues
Bug #941: Support multiple stacked compression, compression that specifies the wrong compression type Actions
Bug #1271: Creating core dump with dropped privileges Actions
Bug #1656: several silent bypasses at the HTTP application level (chunking, compression, HTTP 0.9...) Actions
Bug #1776: Multiple Content-Length headers causes HTP_STREAM_ERROR Actions
Bug #2080: Rules with bad port group var do not error Actions
Bug #2146: DNS answer not logged with eve-log Actions
Bug #2210: logging: SC_LOG_OP_FILTER still displays some lines not matching filter Actions
Bug #2264: file-store.stream-depth not working as expected when configured to a specfic value Actions
Bug #2395: File_data inspection depth while inspecting base64 decoded data Actions
Bug #2619: Malformed HTTP causes FN using http_header_names; Actions
Bug #2626: doc/err: More descriptive message on err for escaping backslash Actions
Bug #2654: Off-by-one iteration of EBPF flow_table_vX in EBPFForEachFlowVXTable (util-ebpf.c) Actions
Bug #2655: GET/POST HTTP-request with no Content-Length, http_client_body miss Actions
Bug #2662: unix socket - memcap read/set showing unlimited where there are limited values configured by default Actions
Bug #2686: Fancy Quotes in Documentation Actions
Bug #2765: GeoIP keyword depends on now discontinued legacy GeoIP database Actions
Bug #2769: False positive alerts firing after upgrade suricata 3.0 -> 4.1.0 Actions
Bug #2786: make install-full does not install some source events rules Actions
Bug #2840: xdp modes - Invalid argument (-22) on certain NICs Actions
Bug #2847: Confusing warning “Rule is inspecting both directions” when inspecting engine analysis output Actions
Bug #2853: filestore (v1 and v2): dropping of "unwanted" files Actions
Bug #2926: engine-analysis with content modifiers not always issues correct warning Actions
Bug #2942: anomaly log: app layer events Actions
Bug #2951: valgrind warnings in ftp Actions
Bug #2953: bypass keyword: Suricata 4.1.x Segmentation Faults Actions
Bug #2961: filestore: memory leaks Actions
Bug #2965: Version 5 Beta1 - Multiple NFQUEUE failed Actions
Bug #2986: stream bypass not making callback as expected Actions
Bug #2992: Build failure on m68k with uclibc Actions
Bug #2999: AddressSanitizer: heap-buffer-overflow in HTPParseContentRange Actions
Bug #3000: tftp: missing logs because of broken tx handling Actions
Bug #3004: SC_ERR_PCAP_DISPATCH with message "error code -2" upon rule reload completion Actions
Bug #3006: improve rule keyword alproto registration Actions
Bug #3007: rust: updated libc crate causes depration warnings Actions
Bug #3009: Fixes warning about size of integers in string formats Actions
Bug #3051: mingw/msys: compile errors Actions
Bug #3054: Build failure with --enable-rust-debug Actions
Bug #3070: coverity warnings in protocol detection Actions
Bug #3072: Rust nightly warning Actions
Bug #3076: Suricata sometimes doesn't store the vlan id when vlan.use-for-tracking is false Actions
Bug #3089: Fedora rawhide af-packet compilation err Actions
Bug #3098: rule-reloads Option? Actions
Bug #3111: ftp warnings during compile Actions
Bug #3112: engine-analysis warning on http_content_type Actions
Bug #3133: http_accept_enc warning with engine-analysis Actions
Bug #3136: rust: Remove the unneeded macros Actions
Bug #3138: Don't install Suricata provided rules to /etc/suricata/rules as part of make install-rules. Actions
Bug #3140: ftp: compile warnings on gcc-8 Actions
Bug #3158: 'wrong thread' tracking inaccurate for bridging IPS modes Actions
Bug #3162: TLS Lua output does not work without TLS log Actions
Bug #3171: defrag: out of bounds read (5.x) Actions
Bug #3177: suricata is logging tls log repeatedly if custom mode is enabled Actions
Bug #3185: decode/der: crafted input can lead to resource starvation (5.x) Actions
Bug #3189: NSS Shutdown triggers crashes in test mode (5.x) Actions
Feature #524: detect double encoding in URI Actions
Feature #713: tls.fingerprint - file usage Actions
Feature #997: Add libhtp event for every htp_log() that needs an event. Actions
Feature #1203: TCP Fast Open support Actions
Feature #1249: http/dns ip-reputation alike technique Actions
Feature #1757: URL Reputation Actions
Feature #2200: Dynamically add md5 to blacklist without full restart Actions
Feature #2283: turn content modifiers into 'sticky buffers' Actions
Feature #2314: protocol parser: rdp Actions
Feature #2315: eve: ftp logging Actions
Feature #2318: matching on large amounts of data with dynamic updates Actions
Feature #2529: doc: include quick start guide Actions
Feature #2539: protocol parser: vxlan Actions
Feature #2670: tls_cert sticky buffer Actions
Feature #2684: Add JA3S Actions
Feature #2738: SNMP parser, logging and detection Actions
Feature #2754: JA3 and JA3S - sets / reputation Actions
Feature #2758: intel / reputation matching on arbitrary data Actions
Feature #2789: Use clang for building eBPF programs even if Suricata is built using GCC Actions
Feature #2916: FTP decoder should have Rust port parsers Actions
Feature #2940: document anomaly log Actions
Feature #2941: anomaly log: add protocol detection events Actions
Feature #2952: modernize http_header_names Actions
Feature #3011: Add new 'cluster_peer' runmode to allow for load balancing by IP header (src<->dst) only Actions
Feature #3058: Hardware offload for XDP bypass Actions
Feature #3059: Use pinned maps in XDP bypass Actions
Feature #3060: Add way to detect TCP MSS values Actions
Feature #3061: Add way to inspect TCP header Actions
Feature #3062: Add way to inspect UDP header Actions
Feature #3074: DNS full domain matching within the dns_query buffer Actions
Feature #3080: Provide a IP pair XDP load balancing Actions
Feature #3081: Decapsulation of GRE in XDP filter Actions
Feature #3084: SIP parser, logging and detection Actions
Feature #3165: New rule keyword: dns.opcode; For matching on the the opcode in the DNS header. Actions
Optimization #879: update configure.ac with autoupdate Actions
Optimization #1218: BoyerMooreNocase could avoid tolower() call Actions
Optimization #1220: Boyer Moore SPM pass in ctx instead of indivual bmBc and bmBg Actions
Optimization #2602: add keywords to --list-keywords output Actions
Optimization #2843: suricatact/filestore/prune: check that directory is a filestore directory before removing files Actions
Optimization #2848: Rule reload when run with -s or -S arguments Actions
Optimization #2991: app-layer-event keyword tx handling Actions
Optimization #3005: make sure DetectBufferSetActiveList return codes are always checked Actions
Optimization #3077: FTP parser command lookup Actions
Optimization #3085: Suggest more appropriate location to store eBPF binaries Actions
Optimization #3137: Make description of all keywords consistent and pretty Actions
Task #2629: tracking: Rust 2018 edition Actions
Task #2974: detect: check all keyword urls Actions
Task #3014: Missing documentation for "flags" option Actions
Task #3092: Date of revision should also be a part of info from suricata -v Actions
Task #3135: counters: new default for decoder events Actions
Task #3141: libhtp 0.5.31 Actions
Security #3169: tls: out of bounds read (5.x) Actions
Security #3176: ipv4: ts field decoding oob read (5.x) Actions

Also available in: TXT