[Snort-devel] [Snort-sigs] [Snort-users] Serious problems Snort 2.9 with relative content matches using http_inspect preprocessor and http_uri keyword
Joel Esler (jesler)
jesler at ...3461...
Mon Dec 9 17:22:25 EST 2013
On Dec 9, 2013, at 5:06 PM, lists at ...3122...<mailto:lists at ...3122...> wrote:
On 12/09/2013 01:09 PM, Joel Esler (jesler) wrote:
184.108.40.206 is EOL. 220.127.116.11 is the last version supported in the 2.9.4.x tree.
Sounds reasonable, the world moves forward and previous deficiencies are
corrected in newly released versions. Ch0de, backport a patch to 18.104.22.168 and
I'm certain many embedded device owners will be happy if you build the binaries
for 'em too (eps military ones). Otherwise there has been some significant
oversight in product selection and deployment that isn't solely shouldered by
Yes. We don’t back port patches, from patch versions to previous patch versions. That’s the point of a patch version. :) In fact we generally don’t back port patches at all, we have patch versions, otherwise we’ll have versions of Snort out there with this patch in it and this other one but not this third patch. We do things this way so we can understand when a customer is at version “x.x.x.x”, they have a particular set of functionality. Furthermore when we speak of “supported version” we’re speaking of rules support.
The developers really only work on the next version. They aren’t working on 22.214.171.124 anymore (since it’s been published), they are working on 126.96.36.199, so if you file a bug against 188.8.131.52 and we fix it, it’ll be fixed in 184.108.40.206, unless it’s critical enough to warrant a 220.127.116.11 version. We make that call during development.
We have beta’ed 18.104.22.168, which means, upon release of 22.214.171.124, 126.96.36.199 will have 90 days of rules support. This EOL cycle is not expected to change under Cisco for the time being.
AEGIS Intelligence Lead
Vulnerability Research Team
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-devel