-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 22 Feb 2026 13:28:52 +0100 Source: suricata Architecture: source Version: 1:7.0.10-1+deb13u3 Distribution: trixie Urgency: medium Maintainer: Pierre Chifflier Changed-By: Andreas Dolp Changes: suricata (1:7.0.10-1+deb13u3) trixie; urgency=medium . * Fix CVE-2026-22258 in 7.0.10. Cherry-Picked from: * f82a388d0283725cb76782cf64e8341cab370830 * df389f8a43a06c718bb336ea082d6c80d6fefda0 * c9b80e5affe073ce9d95d0c935a8d67647c83bf7 * Fix CVE-2026-22262 in 7.0.10. Cherry-Picked from: * 32609e6896f9079c175665a94005417cec7637eb * 27a2180bceaa3477419c78c54fce364398d011f1 * Fix CVE-2026-22264 in 7.0.10. Cherry-Picked from 5789a3d3760dbf33d93fc56c27bd9529e5bdc8f2. * Fix CVE-2026-22259 in 7.0.10. Cherry-Picked from: * 63225d5f8ef64cc65164c0bb1800730842d54942 * 635af8dc8be09667689be71d781912718ca1aa49 * fdd79bdb14488244604729f1d68ca4bc60000dbd * a6d950315d9b6c1e35c10c24d9bb7128d422c21f With this fix, DNP3 has reduced the default maximum number of outstanding transactions from 500 down to 32. Read the update instructions for Suricata 7.0.14 for more details. * Fix CVE-2026-22261 in 7.0.10. Cherry-Picked from: * 44d0c81f537f230e9215c769453fb4d7214217a1 * 7e704a3f50690b5f5d5cc573147ef41449fe37ac Checksums-Sha1: 21e8e3ddcd8c010ae98d15b80921c97d79190c1a 2330 suricata_7.0.10-1+deb13u3.dsc 93725a3636f78471f3994174afe647a46d52185f 44664 suricata_7.0.10-1+deb13u3.debian.tar.xz 984057d1e6ab042a27880f2ec8b9fb1b72a089b5 19612 suricata_7.0.10-1+deb13u3_arm64.buildinfo Checksums-Sha256: 6bb4d20b9eceeb00be5bede0f9ba24104ab85382b4743b87608b7461c8826715 2330 suricata_7.0.10-1+deb13u3.dsc 5f7e164a024dd43cc0c0b365ecf52e0b5f690910092807a46f341ee63053626c 44664 suricata_7.0.10-1+deb13u3.debian.tar.xz 722d48c508b949b9d4f7e35a817704c42c0760b802ddc9b87ef7f5f766ec70f2 19612 suricata_7.0.10-1+deb13u3_arm64.buildinfo Files: 22fde38c700f0a5cf761099bfa12539d 2330 net optional suricata_7.0.10-1+deb13u3.dsc 38ec4fbe182a646b9dfb0c1ce7f3c9d9 44664 net optional suricata_7.0.10-1+deb13u3.debian.tar.xz 31ba190de1dc99a1fd8b98e86fc8495f 19612 net optional suricata_7.0.10-1+deb13u3_arm64.buildinfo -----BEGIN PGP SIGNATURE----- iIoEARYKADIWIQTjqpLKhithiGov9EruqOTPfpjPmQUCaZygPhQcZGV2QGFuZHJl YXMtZG9scC5kZQAKCRDuqOTPfpjPmYzaAQC0s8hde9dB3KnnsHe3dHeTldGhp3I+ GC26bo5pQYZWsAD+KWA8DqD1VKP4tY8yKttty/TBd2AFnUzhEeIEucy5TwM= =zQBE -----END PGP SIGNATURE-----