I was wondering if it would be possible to keep recent versions of Suricata available in the OISF PPA archives? At the moment, only the most recent build for each architecture is available. This can be an issue if the latest build suffers from a “major” bug that impacts specific use cases.
For example, currently only this build is available to install on Ubuntu 22.04:
# apt-cache policy suricata
suricata:
Installed: (none)
Candidate: 1:6.0.11-0ubuntu0
Version table:
1:6.0.11-0ubuntu0 500
But this version suffers from a bug (Bug #6027: Suricatasc encounters issues with commands involving multiple-tenant in Suricata 6.0.11, causing it to become unresponsive. - Suricata - Open Information Security Foundation) that negatively impacts our project which depends on (and ships with) Suricata. We would like to be able to downgrade to 6.0.10, but this is not possible unless we are willing to build & install Suricata from source. This is definitely an option, and has the most flexibility, but this is definitely more involved.
It would be great if we could “just” run apt-get install suricata=6.0.10 to install a slightly older release instead. Unfortunately it seems that older builds are always immediately removed from the PPA.