Skip to content

Snort

v3.9.2.0 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Summary

AI summary

Hash module fixes ensure is_new field correctness, build comparison bug resolved, and CIP inspector adds fallback functionality.

Full changelog

Dependencies:

  • Libdaq v3.0.20
  • LibML v2.0.0

Changes in this release since 3.9.1.0:

  • build: fix comparison of empty integers. Thanks to Hatix Ntsoa.
  • cip: cip inspector fallback functionality
  • extractor: modify JSON Formatter to improve performance
  • file_api: multi instance snort related file cache sharing
  • flow: watchdog kick in dump flow summary
  • hash: ensure that find_else_create functions set is_new field in all cases
  • hash: return cache size from remove so new size check can be atomic
  • http_inspect: parameter name change from partial_depth to partial_depth_body
  • http_param: clear body http_param after each flush
  • main: do not start Analyzer if codec manager doesn't match any codec
  • modbus: modbus paf abort
  • stream_tcp: separate logs and counters for left and right invalid sequence numbers

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Snort

Get notified when new releases ship.

Sign up free

About Snort

A network intrusion detection tool

All releases →

Related context

Beta — feedback welcome: [email protected]