Bug 32950 - snort 2.0.4 is out
|
Bug#:
32950
|
Product: Gentoo Linux
|
Version: unspecified
|
Platform: All
|
|
OS/Version: Linux
|
Status: RESOLVED
|
Severity: enhancement
|
Priority: P2
|
|
Resolution: FIXED
|
Assigned To: aliz@gentoo.org
|
Reported By: moonwalker@astro.nu
|
|
Component: Applications
|
|
|
URL:
http://www.snort.org
|
|
Summary: snort 2.0.4 is out
|
|
Keywords:
|
|
Status Whiteboard:
|
|
Opened: 2003-11-07 09:11 0000
|
snort version 2.0.4 was released on september 17, 2003. latest gentoo release
is
2.0.2. Can we have an update, please?
Reproducible: Always
Steps to Reproduce:
1.
2.
3.
novemeber 6, it should be (I jus copied a previous "alert" and forgot to
change date)
You can use the ebuild of version 2.0.2 by simply copying it to
/usr/portage/net-analyzer/snort/snort-2.0.4.ebuild
Same hast to be done with the libnet patch if you want to use snort with
flexresp. Or change the patch name in the ebuild.
Maybe someone could add it to the portage-tree?
Cheers,
Ben (zerb@elxsi.de)
changes they announce on their web (not reading changelogs), highligts include:
.3: (..) some alerts not firing (..)
.4: (..) core dump (..)
---
Snort 2.0.4 is available. We recommend that everyone upgrade at their soonest
opportunity.
Fixes:
# Fixed a core dump introduced with 2.0.3 when dealing with negated patterns
--
Snort 2.0.3 is available. We recommend that everyone upgrade at their soonest
opportunity.
# doe_ptr handling in byte_test/byte_jump slightly modified to work better
with the pcre patch
# content processing is now recursive to make distance/within processing
better ( thanks to Shai Rubin for patch! )
# fixed a bug in the mwm.c pattern matcher that resulted in some alerts not
firing in a particular configuration of rules
# Thanks to Raul Siles & David Perez for a reproducible test case!