Snort 2.0.3

Chris Green <[email protected]> Tue, 04 Nov 2003 10:44:37 -0500
Newsgroups gmane.comp.security.ids.snort.announce
Message-ID <5965i0cf4q.fsf__44019.1131587655$1067965906@tarblock.sfeng.sourcefire.com>
--=-=-=
Content-Transfer-Encoding: quoted-printable

Snort 2.0.3 is available.  We recommend that everyone upgrade at their
soonest opportunity.

Enhancements:  RPMS can now be made by rpmbuild -ta snort-2.0.3.tar.gz

               Big thanks to JP Vossen <[email protected]> and
               Daniel Wittenberg <[email protected]> for
               making this possible. They are now the official RPM
               maintainers

Fixes:

  - doe_ptr handling in byte_test/byte_jump slightly modified to work
    better with the pcre patch
  - content processing is now recursive to make
    distance/within processing better ( thanks to Shai Rubin for
                                        patch! )
  - fixed a bug in the mwm.c pattern matcher that resulted in some
    alerts not firing in a particular configuration of rules

    Thanks to Raul Siles & David Perez for a reproducible test case!

    NOTE: If you do not have time to update your sensors to 2.0.3 at
          the current time,  add:

             config detection: search-method lowmem  OR
             config detection: search-method ac=20

          to your snort.conf


Thanks to everyone who made this possible!

=2D The Snort Team
=2D-=20
Chris Green <[email protected]>
Let not the sands of time get in your lunch.

--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQA/p8lrcTuckgiWJ4oRAieGAJ91Wde05/IH0XWfFcddOvW1P/JaawCfUjMk
G/AZ15ZCnY0Zc1imr88js0o=
=vflt
-----END PGP SIGNATURE-----
--=-=-=--


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/