Snort 2.0.3
Chris Green <[email protected]> Tue, 04 Nov 2003 10:44:37 -0500
| Newsgroups | gmane.comp.security.ids.snort.announce |
|---|---|
| Message-ID | <5965i0cf4q.fsf__44019.1131587655$1067965906@tarblock.sfeng.sourcefire.com> |
--=-=-=
Content-Transfer-Encoding: quoted-printable
Snort 2.0.3 is available. We recommend that everyone upgrade at their
soonest opportunity.
Enhancements: RPMS can now be made by rpmbuild -ta snort-2.0.3.tar.gz
Big thanks to JP Vossen <[email protected]> and
Daniel Wittenberg <[email protected]> for
making this possible. They are now the official RPM
maintainers
Fixes:
- doe_ptr handling in byte_test/byte_jump slightly modified to work
better with the pcre patch
- content processing is now recursive to make
distance/within processing better ( thanks to Shai Rubin for
patch! )
- fixed a bug in the mwm.c pattern matcher that resulted in some
alerts not firing in a particular configuration of rules
Thanks to Raul Siles & David Perez for a reproducible test case!
NOTE: If you do not have time to update your sensors to 2.0.3 at
the current time, add:
config detection: search-method lowmem OR
config detection: search-method ac=20
to your snort.conf
Thanks to everyone who made this possible!
=2D The Snort Team
=2D-=20
Chris Green <[email protected]>
Let not the sands of time get in your lunch.
--=-=-=
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
iD8DBQA/p8lrcTuckgiWJ4oRAieGAJ91Wde05/IH0XWfFcddOvW1P/JaawCfUjMk
G/AZ15ZCnY0Zc1imr88js0o=
=vflt
-----END PGP SIGNATURE-----
--=-=-=--
-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/