Home / mailings

PDF

[USN-8766-1] Suricata-Update vulnerability

Posted on 15 September 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8766-1
September 15, 2026

suricata-update vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Suricata-Update could be made to write files outside the rules directory
if it processed a specially crafted rule archive.

Software Description:
- suricata-update: tool for updating Suricata rules

Details:

Guillem Lefait discovered that Suricata-Update did not properly validate
destination paths when extracting files referenced by downloaded rule
archives. An attacker could possibly use this issue to write arbitrary
files outside the configured rules directory.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
suricata-update 1.3.7-2ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 24.04 LTS
suricata-update 1.3.0-2ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 22.04 LTS
suricata-update 1.2.3-1ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8766-1
CVE-2026-63347

--===============5190938492674357675==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP