Packages / Debian 12 (Bookworm) / net / suricata

Package: suricata (1:7.0.10-1~bpo12+1)

Next Generation Intrusion Detection and Prevention Tool

Other Packages Related to suricata:

dep: [python3] [any]
interactive high-level object-oriented language (default python3 version)
dep: [libbpf1] (>= 1:0.7.0)
eBPF helper library (shared library)
dep: [libc6] (>= 2.34)
GNU C Library: Shared libraries
dep: [libcap-ng0] (>= 0.7.9)
alternate POSIX capabilities library
dep: [libevent-2.1-7] (>= 2.1.8-stable)
Asynchronous event notification library
dep: [libevent-pthreads-2.1-7] (>= 2.1.8-stable)
Asynchronous event notification library (pthreads)
dep: [libgcc-s1] (>= 4.2)
GCC support library
dep: [libhiredis0.14] (>= 0.14.1)
minimalistic C client library for Redis
dep: [libhtp2] (>= 1:0.5.50-1~bpo12+1~)
HTTP normalizer and parser library
dep: [libhyperscan5] (>= 5.4.0)
High-performance regular expression matching library
dep: [libjansson4] (>= 2.14)
C library for encoding, decoding and manipulating JSON data
dep: [libluajit-5.1-2] (>= 2.0.4+dfsg)
Just in time compiler for Lua - library version
dep: [libluajit2-5.1-2] (>= 2.1~)
OpenResty-maintained branch of LuaJIT (shared objects)
dep: [liblz4-1] (>= 0.0~r127)
Fast LZ compression algorithm library - runtime
dep: [libmagic1] (>= 5.12)
Recognize the type of data in a file using "magic" numbers - library
dep: [libmaxminddb0] (>= 1.0.2)
IP geolocation database library
dep: [libnet1] (>= 1.1.5)
library for the construction and handling of network packets
dep: [libnetfilter-log1] (>= 0.0.13)
Netfilter netlink-log library
dep: [libnetfilter-queue1] (>= 1.0.2)
Netfilter netlink-queue library
dep: [libnfnetlink0] (>= 1.0.2)
Netfilter netlink library
dep: [libnuma1] (>= 2.0.11)
Libraries for controlling NUMA policy
dep: [libpcap0.8] (>= 1.0.0)
system interface for user-level packet capture
dep: [libpcre2-8-0] (>= 10.22)
New Perl Compatible Regular Expression Library- 8 bit runtime files
dep: [librte-eal23] (>= 22.11)
Data Plane Development Kit (librte-eal runtime library)
dep: [librte-ethdev23] (>= 22.11)
Data Plane Development Kit (libethdev runtime library)
dep: [librte-mbuf23] (>= 22.11)
Data Plane Development Kit (librte-mbuf2 runtime library)
dep: [librte-mempool23] (>= 22.11)
Data Plane Development Kit (librte-mempool runtime library)
dep: [librte-net-bond23] (>= 22.11)
Data Plane Development Kit (librte-net-bond runtime library)
dep: [libxdp1] (>= 1.2.0)
library and utilities for use with XDP - shared library
dep: [libyaml-0-2]
Fast YAML 1.1 parser and emitter library
dep: [zlib1g] (>= 1:1.1.4)
compression library - runtime

rec: [python3]
interactive high-level object-oriented language (default python3 version)
rec: snort-rules-default
Package not available
rec: [suricata-update]
tool for updating Suricata rules

sug: [libtcmalloc-minimal4]
efficient thread-caching malloc

Download suricata

Architecture	Package size	Installed size	Files	Package
amd64	3.1 MiB	11 MiB	list of files	Download
arm64	2.7 MiB	9.8 MiB	list of files	Download

Package file paths (61)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/etc/default/suricata
/etc/init.d/suricata
/etc/logrotate.d/suricata
/etc/suricata/classification.config
/etc/suricata/reference.config
/etc/suricata/rules/app-layer-events.rules
/etc/suricata/rules/decoder-events.rules
/etc/suricata/rules/dhcp-events.rules
/etc/suricata/rules/dnp3-events.rules
/etc/suricata/rules/dns-events.rules
/etc/suricata/rules/files.rules
/etc/suricata/rules/ftp-events.rules
/etc/suricata/rules/http2-events.rules
/etc/suricata/rules/http-events.rules
/etc/suricata/rules/ipsec-events.rules
/etc/suricata/rules/kerberos-events.rules
/etc/suricata/rules/modbus-events.rules
/etc/suricata/rules/mqtt-events.rules
/etc/suricata/rules/nfs-events.rules
/etc/suricata/rules/ntp-events.rules
/etc/suricata/rules/quic-events.rules
/etc/suricata/rules/rfb-events.rules
/etc/suricata/rules/smb-events.rules
/etc/suricata/rules/smtp-events.rules
/etc/suricata/rules/ssh-events.rules
/etc/suricata/rules/stream-events.rules
/etc/suricata/rules/tls-events.rules
/etc/suricata/suricata.yaml
/etc/suricata/threshold.config
/lib/systemd/system/suricata.service
/usr/bin/suricata
/usr/bin/suricatactl
/usr/bin/suricatasc
/usr/lib/suricata/ebpf/bypass_filter.bpf
/usr/lib/suricata/ebpf/filter.bpf
/usr/lib/suricata/ebpf/lb.bpf
/usr/lib/suricata/ebpf/vlan_filter.bpf
/usr/lib/suricata/ebpf/xdp_filter.bpf
/usr/lib/suricata/ebpf/xdp_lb.bpf
/usr/lib/suricata/python/suricata/config/defaults.py
/usr/lib/suricata/python/suricata/config/__init__.py
/usr/lib/suricata/python/suricata/ctl/filestore.py
/usr/lib/suricata/python/suricata/ctl/__init__.py
/usr/lib/suricata/python/suricata/ctl/loghandler.py
/usr/lib/suricata/python/suricata/ctl/main.py
/usr/lib/suricata/python/suricata/ctl/test_filestore.py
/usr/lib/suricata/python/suricata/__init__.py
/usr/lib/suricata/python/suricata/sc/__init__.py
/usr/lib/suricata/python/suricatasc/__init__.py
/usr/lib/suricata/python/suricata/sc/specs.py
/usr/lib/suricata/python/suricata/sc/suricatasc.py
/usr/share/doc/suricata/changelog.Debian.gz
/usr/share/doc/suricata/changelog.gz
/usr/share/doc/suricata/copyright
/usr/share/doc/suricata/README.Debian
/usr/share/lintian/overrides/suricata
/usr/share/man/man1/suricata.1.gz
/usr/share/man/man1/suricatactl.1.gz
/usr/share/man/man1/suricatactl-filestore.1.gz
/usr/share/man/man1/suricatasc.1.gz
/usr/share/python3/runtime.d/suricata.rtupdate

Field source: Debian 12 (Bookworm) backports main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 12 (Bookworm) in the browser Build an image that includes suricata

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1:7.0.10-1~bpo12+1	bookworm-backports / main	amd64	Debian 12 backports · main · amd64	3.1 MiB	11 MiB	pool/main/s/suricata/suricata_7.0.10-1~bpo12+1_amd64.deb
1:7.0.10-1~bpo12+1	bookworm-backports / main	arm64	Debian 12 backports · main · arm64	2.7 MiB	9.8 MiB	pool/main/s/suricata/suricata_7.0.10-1~bpo12+1_arm64.deb

Field source: Debian 12 (Bookworm) backports main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVE	Severity	Version impact
[CVE-2026-22258] Published: Jan 22, 2026, 12:00:00 AM UTC suricata: CVE-2026-22258	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2026-22259] Published: Jan 22, 2026, 12:00:00 AM UTC suricata: CVE-2026-22259	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2026-22261] Published: Jan 22, 2026, 12:00:00 AM UTC suricata: CVE-2026-22261	Medium(5.3)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2026-22262] Published: Jan 22, 2026, 12:00:00 AM UTC suricata: CVE-2026-22262	Critical(9.8)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2026-22264] Published: Jan 22, 2026, 12:00:00 AM UTC suricata: CVE-2026-22264	Critical(9.1)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-64344] Published: Nov 26, 2025, 11:05:33 PM UTC suricata: CVE-2025-64344	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-64330] Published: Nov 26, 2025, 11:03:40 PM UTC suricata: CVE-2025-64330	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-64331] Published: Nov 26, 2025, 11:00:40 PM UTC suricata: CVE-2025-64331	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-64332] Published: Nov 26, 2025, 10:59:28 PM UTC suricata: CVE-2025-64332	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-64333] Published: Nov 26, 2025, 10:57:02 PM UTC suricata: CVE-2025-64333	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-59147] Published: Oct 1, 2025, 12:00:00 AM UTC suricata: CVE-2025-59147	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-53538] Published: Jul 22, 2025, 9:36:03 PM UTC suricata: CVE-2025-53538	Medium(5.3)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-29918] Published: Apr 10, 2025, 9:02:32 PM UTC suricata: CVE-2025-29918	Medium(6.2)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-29917] Published: Apr 10, 2025, 9:00:05 PM UTC suricata: CVE-2025-29917	Medium(6.2)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-29916] Published: Apr 10, 2025, 8:03:16 PM UTC suricata: CVE-2025-29916	Medium(6.2)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2025-29915] Published: Apr 10, 2025, 7:51:48 PM UTC suricata: CVE-2025-29915	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2024-47522] Published: Oct 16, 2024, 8:15:06 PM UTC suricata: CVE-2024-47522	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2024-47188] Published: Oct 16, 2024, 7:15:27 PM UTC suricata: CVE-2024-47188	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2024-47187] Published: Oct 16, 2024, 7:15:27 PM UTC suricata: CVE-2024-47187	High(7.5)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm
[CVE-2024-45796] Published: Oct 16, 2024, 7:15:26 PM UTC suricata: CVE-2024-45796	Medium(5.3)	Affected Details (2) `1:7.0.10-1~bpo12+1` · amd64 · bookworm-backports Affected dsa · suricata · debian · bookworm `1:7.0.10-1~bpo12+1` · arm64 · bookworm-backports Affected dsa · suricata · debian · bookworm

[Next results]

Last synced: Oct 28, 2026, 1:40:02 AM UTC

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1:7.0.10-1~bpo12+1 / amd64Observed Sep 1, 2026sha256 33f8516e05f1…978a985aSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 33f8516e05f1096734f36d7539a8ab6ad5eb631e20a6e4f325cd0e5b978a985a

Verify download

printf '%s  %s\n' '33f8516e05f1096734f36d7539a8ab6ad5eb631e20a6e4f325cd0e5b978a985a' 'suricata_7.0.10-1~bpo12+1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) backports main amd64

1:7.0.10-1~bpo12+1 / arm64Observed Sep 1, 2026sha256 23caf091a127…e58be900Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 23caf091a1276259518e88346ed1f3afedb77128fa5a9d53af8df48be58be900

Verify download

printf '%s  %s\n' '23caf091a1276259518e88346ed1f3afedb77128fa5a9d53af8df48be58be900' 'suricata_7.0.10-1~bpo12+1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) backports main arm64

Sources

Debian 12 (Bookworm) backports main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-backports-main-amd64:b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Signed-object SHA-256
43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Observed SHA-256
b863aa021bef70ee6ca393bbb9267d954281b77fd02a1d485c8259303ffdc0e6
Result
match verified
Debian 12 (Bookworm) backports main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Signature evidence
bookworm-backports-main-arm64:9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-backports/InRelease
Signed-object SHA-256
43c0dc1b38775aa77216f1aca0b9e47abde4ef3b6f223fd965a6464f45da709d
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Observed SHA-256
9a9a82396b83567fd3c9e3df7d9190b5685c1bf07ef2ad14e04ad353b0caf4d5
Result
match verified