[Git][security-tracker-team/security-tracker][ecite/suricata-cves-202608] suricata: Use square brackets for CVE descriptions
Andreas Dolp (@ecite)
gitlab at salsa.debian.org
Tue Sep 1 12:52:41 BST 2026
Andreas Dolp pushed to branch ecite/suricata-cves-202608 at Debian Security Tracker / security-tracker
Commits:
2c2131e1 by Andreas Dolp at 2026-09-01T13:50:57+02:00
suricata: Use square brackets for CVE descriptions
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18,7 +18,7 @@ CVE-2026-XXXX [GHSA-2p8c-ff85-vh9x: PCRE2: out-of-bounds read in pcre2_match() a
- pcre2 <unfixed>
NOTE: https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x
NOTE: Fixed by: https://github.com/PCRE2Project/pcre2/commit/f67db227af31bba7cdf2a7a00b97af91b588c2f5 pcre2-10.48-RC1)
-CVE-2026-57227 (mqtt: unbounded number of messages per tx)
+CVE-2026-57227 [mqtt: unbounded number of messages per tx]
- suricata 1:8.0.6-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-7h2h-hpj2-9w6p
@@ -26,12 +26,12 @@ CVE-2026-57227 (mqtt: unbounded number of messages per tx)
NOTE: https://redmine.openinfosecfoundation.org/issues/8653 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/5cde93dea38533c9b225128ba9d54955997dc273 (suricata-7.0.17)
NOTE: https://github.com/OISF/suricata/commit/c03666d261256df5a2d1f5800872da8a5addf6a5 (suricata-8.0.6)
-CVE-2026-57229 (smtp: evasion due to incomplete state reset)
+CVE-2026-57229 [smtp: evasion due to incomplete state reset]
- suricata 1:8.0.6-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-ph5p-pm8r-m355
NOTE: https://redmine.openinfosecfoundation.org/issues/8650 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/c0215c7e175b0000ef8450928dd1f3453c48379b (suricata-8.0.6)
-CVE-2026-57223 (windows: unquoted LocalSystem service ImagePath)
+CVE-2026-57223 [windows: unquoted LocalSystem service ImagePath]
- suricata 1:8.0.6-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-jh8w-wf3f-58jp
@@ -39,19 +39,19 @@ CVE-2026-57223 (windows: unquoted LocalSystem service ImagePath)
NOTE: https://redmine.openinfosecfoundation.org/issues/8627 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/0dad38fff024b4fec9bc8144d8b94dbca39aac2e (suricata-7.0.17)
NOTE: https://github.com/OISF/suricata/commit/2b924d47cc51d0b7760cda3519f2c04a2f65ea38 (suricata-8.0.6)
-CVE-2026-57225 (datasets: NULL dereference on unexpected ndjson files)
+CVE-2026-57225 [datasets: NULL dereference on unexpected ndjson files]
- suricata 1:8.0.6-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-vqqx-88xw-qqvc
NOTE: https://redmine.openinfosecfoundation.org/issues/8625 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/bd3293aca714f5d090b73e7d9be0e5cd7e3f5f53 (suricata-8.0.6)
-CVE-2026-57224 (dhcp: unbounded tx growth with unidirectional traffic)
+CVE-2026-57224 [dhcp: unbounded tx growth with unidirectional traffic]
- suricata 1:8.0.6-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-m2vc-g65c-ph7m
NOTE: https://redmine.openinfosecfoundation.org/issues/8622 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/f234d155bcf43df403ee0823b60de8d02e2b99b2 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/bac8a69ca48c14582d39a244a87edad44751ebe1 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/ef035c7603293a10c5ad087e3d20b05f75236144 (suricata-8.0.6)
-CVE-2026-57226 (detect/file_data: heap buffer overflow in SWF decompression depth handling)
+CVE-2026-57226 [detect/file_data: heap buffer overflow in SWF decompression depth handling]
- suricata 1:8.0.6-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-p33j-r48q-3jcf
@@ -59,13 +59,13 @@ CVE-2026-57226 (detect/file_data: heap buffer overflow in SWF decompression dept
NOTE: https://redmine.openinfosecfoundation.org/issues/8643 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/82af0aeb7cec39e206a9ca96c4966425eddeaa74 (suricata-7.0.17)
NOTE: https://github.com/OISF/suricata/commit/b63224871b0f8b0b1f7b8c22d05ba8a5c5f69fbb (suricata-8.0.6)
-CVE-2026-57228 (mime: buffer over read in quoted printable decoding)
+CVE-2026-57228 [mime: buffer over read in quoted printable decoding]
- suricata 1:8.0.1-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-qxm4-q7vx-7xj4
NOTE: https://redmine.openinfosecfoundation.org/issues/8608 (suricata-7.0.17)
NOTE: https://github.com/OISF/suricata/commit/19880f9d5bbe2b8f8e8867a577848dce2b532c86 (suricata-7.0.17)
-CVE-2026-57222 (ippair: IPv4/IPv6 hash collision can reuse wrong IPPair state)
+CVE-2026-57222 [ippair: IPv4/IPv6 hash collision can reuse wrong IPPair state]
- suricata 1:8.0.6-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-2r8x-23fw-hgcg
@@ -73,17 +73,17 @@ CVE-2026-57222 (ippair: IPv4/IPv6 hash collision can reuse wrong IPPair state)
NOTE: https://redmine.openinfosecfoundation.org/issues/8568 (suricata-8.0.6)
NOTE: https://github.com/OISF/suricata/commit/9d788575c5d22a34eeed50d56557ed12b05e0aec (suricata-7.0.17)
NOTE: https://github.com/OISF/suricata/commit/c92e270c4a795c52bce610aa1ce9ebaf065c49e6 (suricata-8.0.6)
-CVE-2026-46352 (defrag: fragmented encapsulated traffic with fragments can lead to deadlock)
+CVE-2026-46352 [defrag: fragmented encapsulated traffic with fragments can lead to deadlock]
- suricata 1:8.0.5-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-rc34-46x6-mxxm
NOTE: https://redmine.openinfosecfoundation.org/issues/8561 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/519ded68fcd7c84d5d348735bba9b02036f91ef8 (suricata-8.0.5)
-CVE-2026-45770 (detect/lua: buffer overflow leads to sandbox escape)
+CVE-2026-45770 [detect/lua: buffer overflow leads to sandbox escape]
- suricata 1:8.0.5-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-653j-cc95-vj4c
NOTE: https://redmine.openinfosecfoundation.org/issues/8557 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/09c45d91a565642dffefeb87c7b54c4e3224db73 (suricata-8.0.5)
-CVE-2026-46387 (http2: excessive memory alloc with decompression bomb)
+CVE-2026-46387 [http2: excessive memory alloc with decompression bomb]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-45p7-j5wm-8wrx
@@ -95,19 +95,19 @@ CVE-2026-46387 (http2: excessive memory alloc with decompression bomb)
NOTE: https://github.com/OISF/suricata/commit/69107199d6fbff979bad2174cd3a904ab8951bd6 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/20104d09788b606b1de1923286d463a07ad47e6d (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/9c24b5bf1cd3e87f3e61ab89c972fce23ca227af (suricata-8.0.5)
-CVE-2026-45767 (datasets: save with load cmd can save to absolute filename)
+CVE-2026-45767 [datasets: save with load cmd can save to absolute filename]
- suricata 1:8.0.5-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-gfxq-gffp-w9rv
NOTE: https://redmine.openinfosecfoundation.org/issues/8548 (suricata-7.0.16)
NOTE: https://redmine.openinfosecfoundation.org/issues/8547 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/477120e3409a2270e5d698c89e7dbd0a74f1f218 (suricata-7.0.16)
NOTE: https://github.com/OISF/suricata/commit/654f5fa64ffbb9ce855f178b7f45cce8ce72ce68 (suricata-8.0.5)
-CVE-2026-45752 (detect: use-after-free in decompress transform pipeline)
+CVE-2026-45752 [detect: use-after-free in decompress transform pipeline]
- suricata 1:8.0.5-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-qmc9-vqq2-8mv3
NOTE: https://redmine.openinfosecfoundation.org/issues/8541 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/11d1fe1ca866d82e8bb3dd4493016188d890aebd (suricata-8.0.5)
-CVE-2026-45751 (detect: heap-use-after-free in inspection-buffer transform chaining)
+CVE-2026-45751 [detect: heap-use-after-free in inspection-buffer transform chaining]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-59q6-j4w8-8pjx
@@ -115,7 +115,7 @@ CVE-2026-45751 (detect: heap-use-after-free in inspection-buffer transform chain
NOTE: https://redmine.openinfosecfoundation.org/issues/8540 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/89cde65f8d4314b007c723843b79dfa9e5e26e88 (suricata-7.0.16)
NOTE: https://github.com/OISF/suricata/commit/3d371fff99d7d0af0912543174c6ea2abb0ff6a3 (suricata-8.0.5)
-CVE-2026-45759 (http1: quadratic complexity with usage of HTTPParseContentDispositionHeader)
+CVE-2026-45759 [http1: quadratic complexity with usage of HTTPParseContentDispositionHeader]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-cfq5-g2v5-6652
@@ -123,7 +123,7 @@ CVE-2026-45759 (http1: quadratic complexity with usage of HTTPParseContentDispos
NOTE: https://redmine.openinfosecfoundation.org/issues/8530 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/a41b135c5c054c806346f8d6e02d67b8f5594be0 (suricata-7.0.16)
NOTE: https://github.com/OISF/suricata/commit/8abe0f2a8de0d910d4d4461474f5bfb519877053 (suricata-8.0.5)
-CVE-2026-45761 (detect: case insensitivity in frames lead to buffer overflow)
+CVE-2026-45761 [detect: case insensitivity in frames lead to buffer overflow]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-r74x-74x5-r9vm
@@ -131,7 +131,7 @@ CVE-2026-45761 (detect: case insensitivity in frames lead to buffer overflow)
NOTE: https://redmine.openinfosecfoundation.org/issues/8527 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/df3336bf4f8e8034570b1608f87065391d79c022 (suricata-7.0.16)
NOTE: https://github.com/OISF/suricata/commit/31d3977720990bb0efd20be08a6c2362287ea460 (suricata-8.0.5)
-CVE-2026-45762 (defrag: incorrect ip fragment reuse causes remote crash)
+CVE-2026-45762 [defrag: incorrect ip fragment reuse causes remote crash]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-gv2j-f6jv-3878
@@ -139,12 +139,12 @@ CVE-2026-45762 (defrag: incorrect ip fragment reuse causes remote crash)
NOTE: https://redmine.openinfosecfoundation.org/issues/8511 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/b8ae15e2a049fac8714a6f37be3171a7376a4255 (suricata-7.0.16)
NOTE: https://github.com/OISF/suricata/commit/97d6fa9e1467f6e6957f32b034199c51980e2ffd (suricata-8.0.5)
-CVE-2026-45763 (lua: sandbox alloc_limit not enforced on new allocations)
+CVE-2026-45763 [lua: sandbox alloc_limit not enforced on new allocations]
- suricata 1:8.0.5-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-9h43-frr8-xx6m
NOTE: https://redmine.openinfosecfoundation.org/issues/8508 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/3e064d47964982a93e5facb9b8700f32d869e139 (suricata-8.0.5)
-CVE-2026-45764 (http2: type confusion from protocol change)
+CVE-2026-45764 [http2: type confusion from protocol change]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-5rvq-72r5-rqhr
@@ -152,7 +152,7 @@ CVE-2026-45764 (http2: type confusion from protocol change)
NOTE: https://redmine.openinfosecfoundation.org/issues/8493 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/61c4df2821441226a2e0d3a5723f44ba95764cdd (suricata-7.0.16)
NOTE: https://github.com/OISF/suricata/commit/75a4641af6ee87a605e10557e6e2417330227a6a (suricata-8.0.5)
-CVE-2026-45765 (dnp3: unbounded reassembly)
+CVE-2026-45765 [dnp3: unbounded reassembly]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-m8x4-c78g-r4vj
@@ -164,7 +164,7 @@ CVE-2026-45765 (dnp3: unbounded reassembly)
NOTE: https://github.com/OISF/suricata/commit/2a4947f0c0791b38b951b4140cb49bb814945045 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/d869f782f737515a0c406bbb86a91d5ff626f3e1 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/d62b7cd98054ab03156e7ce2cac15166b46ab391 (suricata-8.0.5)
-CVE-2026-45766 (nfs: OOM on stateful structures)
+CVE-2026-45766 [nfs: OOM on stateful structures]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-jqr4-ch38-wvm6
@@ -176,7 +176,7 @@ CVE-2026-45766 (nfs: OOM on stateful structures)
NOTE: https://github.com/OISF/suricata/commit/f43d442251ab96adcc0bfece6919832b1dc8e9be (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/af37786ee48e0f53a3b29d6c9776f33cee9c67f9 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/c029c0958537224ef85f008a578265b52803021d (suricata-8.0.5)
-CVE-2026-45769 (ikev2: OOM due to unbounded client_transforms)
+CVE-2026-45769 [ikev2: OOM due to unbounded client_transforms]
- suricata 1:8.0.5-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-hg2g-r464-5593
@@ -184,12 +184,12 @@ CVE-2026-45769 (ikev2: OOM due to unbounded client_transforms)
NOTE: https://redmine.openinfosecfoundation.org/issues/8416 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/97251495e674836693c4636f1eb95fc10b191c15 (suricata-7.0.16)
NOTE: https://github.com/OISF/suricata/commit/3a6414eb6ae2b2368df51de50e1c1c980109c7a6 (suricata-8.0.5)
-CVE-2026-45768 (ldap: OOM on unbounded responses per tx)
+CVE-2026-45768 [ldap: OOM on unbounded responses per tx]
- suricata 1:8.0.5-1
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-cr4x-w4c4-57p7
NOTE: https://redmine.openinfosecfoundation.org/issues/8406 (suricata-8.0.5)
NOTE: https://github.com/OISF/suricata/commit/82cf3d67b1f9fe963c372303ae36551146fee890 (suricata-8.0.5)
-CVE-2026-45747 (lua/tls: null dereference in GetCertInfo)
+CVE-2026-45747 [lua/tls: null dereference in GetCertInfo]
- suricata 1:8.0.1-1
[trixie] - suricata <ignored> (Minor issue)
NOTE: https://github.com/OISF/suricata/security/advisories/GHSA-vfc5-9844-rmhv
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c2131e1bfe14048b08a5174e748622619f11d97
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2c2131e1bfe14048b08a5174e748622619f11d97
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260901/1cedb1b5/attachment.htm>
More information about the debian-security-tracker-commits
mailing list