Software Update: Suricata 1.4.6

Suricata is an open source network intrusion detections system (IDS), intrusion prevention system (IPS), and network security monitoring engine. It can be used to monitor network traffic and alert a system administrator if anything suspicious is detected. Development is overseen by the Open Information Security Foundation, with support from the community and various manufacturers. Version 1.4.6 of Suricata is described as a small but important update, which fixes some important issues.

Fixes

• Bug 958: Malformed SSL records leading to crash. Reported by Sebastian Roschke. CVE-2013-5919.
• Bug 971: AC pattern matcher out of bounds memory read.
• Bug 965: Improve negated content handling. Reported by Will Metcalf.
• Bug 937: Fix IPv6-in-IPv6 decoding.
• Bug 934: improve address parsing.
• Bug 969: fix unified2 not logging tagged packets.