github snort3/snort3 3.9.6.0
Snort v3.9.6.0

14 hours ago

Dependencies:

  • Libdaq v3.0.21
  • LibML v2.0.0

Changes in this release since 3.9.5.0

  • actions: fix integer underflow in ips_actions pegcount aggregation
  • appid: add setUserDetectorDataItem lua detector API
  • appid: fixed crash in stats manager
  • appid: fix http content processing
  • appid: fixing loop inside nntp validate data
  • appid: retain the shadow traffic status after detector reload
  • appid: standardize variable types in user data map unit test
  • codecs: fix encode for pppoe and ppp
  • control: fix potential buffer overrun by properly checking return of vsnprintf.
  • dce_rpc: clear rule options before freeing the buffer
  • dce-rpc: proper proto-bits not set in DCE2_GetRpkt which causes assertion fail in u2 logger
  • dce_rpc: reassembling out of bounds packets
  • decoder: improved decoding fails error message on tracer
  • decompress: added check for mini_fat_persector to not to be zero
  • decompress: fixed VBA decompression unhandled mem alloc exception
  • file_api: file cache sharing to use ref count for file inspector
  • file_api: set file size when file size is middle and data flushed
  • flow: continue retrying when the retry processing is still pending
  • host_tracker: acquire lock on host tracker cache before read access of member variables
  • host_tracker: iterate over network protocol vectors with reverse iterators instead of while loop
  • http_inspect,pub_sub: provide an API in HttpEvent to find whether the HTTP response is using a supported encoding type.
  • log: use batched logger for all kinds of log messages in prod when log_buffer config enabled
  • main: add message when unable to set affinity
  • memory: combine main and first pkt thread memory stats; resolve race condition
  • module_manager: use std::move to improve performance when assigning string variables
  • pub_sub: add quic logging events
  • s7comm: added stream splitter abort checks
  • stream: do not clear a session on a rebuilt packet
  • stream_tcp: do not generate established event on RST if 3whs is not complete
  • trace: print n-tuple for other packet types with IP layer set

Don't miss a new snort3 release

NewReleases is sending notifications on new releases.