Wednesday, April 3, 2013

Snort 2.9.4.5 is now available

Snort 2.9.4.5 is now available on snort.org, at
https://www.snort.org/downloads in the Latest Release section.

******
Please Note:
We understand that there may be some confusion by moving from 2.9.4.1
to 2.9.4.5, and we apologize for that. We are aligning our internal
build numbers with our open source build versions to make versioning
and distribution easier on the backend. This will help us in ensuring
that the correct versions of rules are available for the supported
versions of Snort.
******

Snort 2.9.4.5 includes changes for the following:

[*] Improvements

* Removed proxy information from HTTP URI searching so that the URI
matches are just on the actual URI so that offsets work as expected.

Thanks to L0rd Ch0de1m0rt for reporting the issue.


* Addressed an issue when logging of packet data via unified2 when
alerting on a packet with multiple HTTP PDUs.

* Continue to search for patterns within the HTTP URI until the end of
the URI.

See the Release Notes and ChangeLog for more details.

Please submit bugs, questions, and feedback to bugs@snort.org.

Happy Snorting!
The Snort Release Team