We are pleased to announce the release of Suricata 8.0.7.
This is a security release, fixing a number of important issues. This is the release with the highest number of vulnerability reports we’ve had so far, as a result of the rise of AI(-assisted) analysis, resulting in a much higher-than-usual number of issues.
Get the release here: https://www.openinfosecfoundation.org/download/suricata-8.0.7.tar.gz
Notable Changes
Various security, performance, accuracy, and stability issues have been fixed.
All tickets for 8.0.7: 8.0.7 - Suricata - Open Information Security Foundation
(note that private Suricata tickets will be opened to the public 2 weeks after the release)
CVE IDs Addressed:
| CVE | Severity (OISF) | Severity (CVSS 3.1) | Tickets |
|---|---|---|---|
| Pending | MODERATE | MODERATE | 9013 |
| Pending | HIGH | HIGH | 9009 |
| Pending | LOW | LOW | 9005 |
| Pending | CRITICAL | CRITICAL | 9004 |
| Pending | HIGH | MODERATE | 9002 |
| Pending | HIGH | HIGH | 9000 |
| Pending | HIGH | HIGH | 8998 |
| Pending | LOW | LOW | 8989 |
| Pending | MODERATE | MODERATE | 8988 |
| Pending | LOW | LOW | 8987 |
| Pending | LOW | LOW | 8986 |
| Pending | LOW | LOW | 8985 |
| Pending | LOW | MODERATE | 8984 |
| Pending | MODERATE | MODERATE | 8983 |
| Pending | LOW | LOW | 8982 |
| Pending | LOW | LOW | 8981 |
| Pending | LOW | MODERATE | 8977 |
| Pending | CRITICAL | CRITICAL | 8974 |
| Pending | MODERATE | MODERATE | 8972 |
| Pending | MODERATE | LOW | 8971 |
| Pending | LOW | LOW | 8965 |
| Pending | LOW | LOW | 8963 |
| Pending | HIGH | HIGH | 8957 |
| Pending | LOW | LOW | 8950 |
| Pending | MODERATE | MODERATE | 8947 |
| Pending | MODERATE | MODERATE | 8946 |
| Pending | HIGH | HIGH | 8945 |
| Pending | HIGH | MODERATE | 8941 |
| Pending | LOW | MODERATE | 8938 |
| Pending | MODERATE | MODERATE | 8937 |
| Pending | HIGH | LOW | 8933 |
| Pending | LOW | MODERATE | 8932 |
| Pending | HIGH | MODERATE | 8931 |
| Pending | HIGH | LOW | 8930 |
| Pending | LOW | MODERATE | 8927 |
| Pending | HIGH | LOW | 8925 |
| Pending | LOW | LOW | 8924 |
| Pending | MODERATE | MODERATE | 8922 |
| Pending | MODERATE | MODERATE | 8921 |
| Pending | MODERATE | MODERATE | 8920 |
| Pending | MODERATE | MODERATE | 8913 |
| Pending | LOW | MODERATE | 8910 |
| Pending | MODERATE | MODERATE | 8909 |
| Pending | HIGH | LOW | 8906 |
| Pending | HIGH | MODERATE | 8898 |
| Pending | LOW | LOW | 8883 |
| Pending | MODERATE | LOW | 8881 |
| Pending | HIGH | MODERATE | 8877 |
| Pending | MODERATE | MODERATE | 8875 |
| Pending | LOW | MODERATE | 8872 |
| Pending | HIGH | MODERATE | 8871 |
| Pending | HIGH | MODERATE | 8870 |
| Pending | MODERATE | MODERATE | 8810 |
| Pending | HIGH | MODERATE | 8808 |
| Pending | HIGH | LOW | 8806 |
| Pending | HIGH | HIGH | 8801 |
| Pending | HIGH | HIGH | 8794 |
| Pending | MODERATE | HIGH | 8792 |
| Pending | MODERATE | HIGH | 8790 |
| Pending | MODERATE | MODERATE | 8788 |
| Pending | LOW | MODERATE | 8769 |
| Pending | MODERATE | HIGH | 8758 |
| Pending | HIGH | HIGH | 8756 |
| Pending | LOW | LOW | 8751 |
| Pending | HIGH | HIGH | 8746 |
| Pending | LOW | LOW | 8732 |
| Pending | HIGH | MODERATE | 8677 |
Severity scores defined by OISF and CVSS may vary due to how we assess and evaluate impact. While CVSS has a more generic view on vulnerabilities and will penalize any network-related issues, for instance, OISF considers Suricata context as the baseline (thus, as example, affecting the network isn’t taken into account).
Suricata Security Policies: Security Policy · OISF/suricata · GitHub
Suricata Security Advisories: Security Advisories · OISF/suricata · GitHub
Security Issues
Note that we have refined our severities sometime back. CRITICAL severity is reserved for issues affecting Tier 1 features enabled by default, involving remotely triggerable traffic-based code execution. HIGH severity also covers Tier 1 features enabled by default, where there’s possible loss of visibility or availability.
If you think you’ve encountered a security vulnerability, please see how to report a security issue.
Suricata 7 is End of Life
Suricata 7 has reached EOL with the last Suricata 7.0.17. Please upgrade your setups to the latest supported version in the Suricata 8 branch.
With Suricata 7 EOL, the LibHTP project is also end-of-life now, and the repository has been archived: LibHTP Readme.
Special Thanks
For contributing patches, reporting vulnerabilities and bugs, or otherwise helping keep Suricata code secure, we appreciate:
Aaron Chen, Ada Logics in collaboration with Anthropic Research, Adam Kiripolsky, Alexander Stadnikov, Luukas Larinkoski, Nozomi Networks Labs Advisory, Antoine Abou Faysal, Andreas Dolp, aramosf, Arthur Chan, Binbin Xu of Tencent YUNDING LAB CodeBuddy Security, Bin Luo (University of Electronic Science and Technology of China (UESTC)), Communications Security Establishment Canada (CSE), Denis Balashov, z00xcv, Feng Xue, Kevin Valerio and Quan Nguyen from Trail of Bits in collaboration with OpenAI, Lucas Ariel Sotomayor, Maksim Hayder, Kuniyoshi Noguchi (野口晋義), Riyan Dhiman, Stephen Donnelly, Urval Kheni, Yash Datre, Yazan Balawneh, OSS-Fuzz, Coverity.
News from SuriCon
Just a Few Seats Left for the Training Sessions!
If you haven’t decided on which pre-SuriCon training you want to attend in Lisbon, don’t wait for too long. We are happy to report that the rooms are filling up quickly: don’t miss your spot!
More details on the three 2-days Lisbon trainings: Trainings – SURICON
SuriCon Lisbon 2026 speakers announced
Our agenda for November will be packed! See all our amazing speakers at Speakers Lisbon – SURICON And stay tuned, we shall have a couple of pre-SuriCon webinars this year, too!
For SuriCon archives, registration and more, go to: suricon.net
About Suricata
Suricata is a high-performance Network Threat Detection, IDS, IPS, and Network Security Monitoring engine. Open-source and owned by a community-run non-profit foundation, the Open Information Security Foundation (OISF). Suricata is developed by OISF, its supporting vendors, and the community.
Newsletter
Stay up-to-date with the latest events, webinars and happenings in our community: sign up for Suricata’s quarterly newsletter: https://newsletter.suricata.io/