Project

General

Profile

6.0.6

closed

07/12/2022

100%

49 issues   (49 closed — 0 open)

Issues by
Bug

36/36
Feature

4/4
Optimization

4/4
Task

2/2
Security

3/3
Related issues
Bug #4645: TCP reassembly, failed assert app_progress > last_ack_abs, both sides need to be pruned Actions
Bug #5054: Documentation copyright years are invalid Actions
Bug #5120: alerts: 5.0.8/6.0.4 count noalert sigs towards built-in alert limit (6.0.x backport) Actions
Bug #5154: flowbits - no error on invalid options Actions
Bug #5241: SSH built-in rules are not included in the source tarball Actions
Bug #5250: smb: integer underflows and overflows Actions
Bug #5282: 6.0.x: ftp: don't let first incomplete segment be over maximum length Actions
Bug #5288: Stacktrace logger initialized twice. Actions
Bug #5300: eve: payload field randomly missing even if the packet field is present Actions
Bug #5303: Failed assert DeStateSearchState Actions
Bug #5304: cppcheck: various static analyzer "warning"s Actions
Bug #5324: FTP: expectation created in wrong direction (6.0.x backport) Actions
Bug #5334: stacktrace-on-signal: Kills all processes in the same process group Actions
Bug #5337: rust: inconsistency between rust structure RustParser and C structure AppLayerParser Actions
Bug #5338: smtp: PreProcessCommands does not handle all the edge cases (6.0.x backport) Actions
Bug #5340: decode/mime: base64 decoding for data with spaces is broken (6.0.x backport) Actions
Bug #5342: ftp: quadratic complexity for tx iterator with linked list (6.0.x backport) Actions
Bug #5344: CIDR prefix calculation fails on big endian archs (6.0.x backport) Actions
Bug #5346: dcerpc: unsigned integer overflow in parse_dcerpc_bindack Actions
Bug #5351: stacktrace-on-signal: Kills all processes in the same process group (6.0.x backport) Actions
Bug #5355: detect/alert: fix segvfault when incrementing discarded alerts if alert-queue-expand fails (6.0.x backport) Actions
Bug #5357: test failure on Ubuntu 22.04 with GCC 12 (6.0.x backport) Actions
Bug #5360: Build with ebpf is failing Actions
Bug #5378: unused doc warnings on mingw64/windows compile Actions
Bug #5380: IPS: ip only rules, but with negated addresses not treated like pure ip-only rules in IPS context (6.0.x backport) Actions
Bug #5387: detect/threshold: offline time handling issue (6.0.x backports) Actions
Bug #5394: fileinfo: inconsistent file size tracking for GAPs (6.0.x backport) Actions
Bug #5395: DCERPC protocol detection when nested in SMB (6.0.x backport) Actions
Bug #5396: inspection of smb traffic without smb/dcerpc doesn't work correct (6.0.x backport) Actions
Bug #5397: events: PACKET_RECYCLE does not reset event_last_logged Actions
Bug #5398: events: PACKET_RECYCLE does not reset event_last_logged (6.0.x backport) Actions
Bug #5403: detect: will still inspect packets of a "dropped" flow for non-TCP (6.0.x backport) Actions
Bug #5414: PCRE: use match and recursion limit for pcrexform (6.0.x backport) Actions
Bug #5420: Duplicate TLS subjects in tls metadata. (6.0.x backport) Actions
Bug #5421: TCP flow that retransmits the SYN with a newer TSval not properly tracked (6.0.x backport) Actions
Bug #5422: bypass: Memory leak of some flow bypass objects. (6.0.x backport) Actions
Feature #5425: ips: allow dropping of flow if stream.memcap is hit (6.0.x backport) Actions
Feature #5426: ips: allow dropping of flow if stream.reassembly.memcap is hit (6.0.x backport) Actions
Feature #5427: ips: allow dropping of flow if flow.memcap is hit (6.0.x backport) Actions
Feature #5428: ips: allow dropping of flow if applayer reaches error state (6.0.x backport) Actions
Optimization #5125: Use configurable or more dynamic @ PACKET_ALERT_MAX@ (6.0.x backport) Actions
Optimization #5127: alerts: use alert queing in DetectEngineThreadCtx (6.0.x backport) Actions
Optimization #5233: rules: too much time spent in SigMatchListSMBelongsTo at startup Actions
Optimization #5240: rules: mpm setup more costly than needed Actions
Task #5323: stats/alert: log out to stats alerts that have been discarded from packet queue (6.0.x backport) Actions
Task #5352: config: add suricata version as a comment to the top of the configuration file (6.0.x backport) Actions
Security #5252: Infinite loop in JsonFTPLogger Actions
Security #5254: protocol detection: exploitable type confusion due to concurrent protocol changes Actions
Security #5431: filestore: Segfault with filestore enabled and forced (6.0.x backport) Actions

Also available in: TXT