Tuesday, May 15, 2012

Snort 2.9.2.3 has been released!

Snort 2.9.2.3 is now available on snort.org, at https://www.snort.org/downloads in the Latest Release section.

2.9.0 RC & later packages are signed with a new PGP key (that is signed with the previous key).

Snort 2.9.2.3 includes changes for the following:

 * Update to GTP preprocessor to better handle GTPv1 data.

 * Update to DNP3 preprocessor to add stricter checking on
   packets before processing by dnp3.  Improved checking
   on reassembly buffer

 * Update to PCRE rule option processing to prevent issues
   seen w/ libpcre-8.30 and certain rules.

 * Update to dcerpc2 to not abort reassembly if target-based
   protocol is undefined.

Please submit bugs, questions, and feedback to bugs@snort.org.