Snort

v3.10.0.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 8mo SIEM & Threat Detection

✓ No known CVEs patched

✓ No known CVEs patched in this version

Affected surfaces

auth rce_ssrf

Summary

AI summary

Added OPCUA support, introduced a QUIC extractor, and improved appid parsing bounds checks.

Full changelog

Dependencies:

Changes in this release since 3.9.7.0:

appid: ftp parsing bounds check
appid: ignore empty strings in ssl lookup api
dce_rpc: changed copy to move
dns: add counters for different DNS flavors
extractor: add quic extractor
extractor: fix cppcheck errors
file_api: copy cacheable property to new context from cached context and use filecontext from cache, only if the entry is marked as cacheable
http_inspect: rename request and response buffers
ips_options: make pcre match data thread specific
main: Retry queue timeout option added
mp_data_bus: unsubscribe API
opcua: adding support for opcua
opcua: inspector documentation
packet_io: changes in active_packet_trace_test
reload: make proc_stats thread_local
ssh: support fields for extractor

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Snort

Get notified when new releases ship.

About Snort

A network intrusion detection tool