From: John Audia Date: Thu, 15 Jan 2026 14:42:48 +0000 (-0500) Subject: snort3: update to 3.10.1.0 X-Git-Url: http://git.cdn.openwrt.org/?a=commitdiff_plain;h=98148a4161390df9753cb563926fd2a8ba70c73f;p=feed%2Fpackages.git snort3: update to 3.10.1.0 New upstream release. Changelog: alert_fast: ensure call_once definition doesn't collide in std vs glibc, thanks to krag on GitHub for suggesting this fix alert_json: add support for logging appid, thanks to ssam18 on GitHub for suggesting this change appid: add check to avoid setting brute force state for pending sessions that are pruned appid: allow out-of-order packet inspection in third-party engine appid: check for Lua table errors during initialization and cleanup appid: enable out-of-order inspection by default appid: fix client process regex mapping logic appid: fix eve process handler event debug logging appid: fix setting global ssh ignore flag appid: fix size check in TFTP service detector appid: mDNS TXT records parsing and deviceinfo event generation appid: prevent multiple out-of-bounds reads in ssl build: address compilation warnings build: fix Coverity warnings in related components cmake: fix pkg-config path for libdir, thanks to brianmcgillion on GitHub for submitting a similar fix decoder: adding encode function for TransbridgeCodec dns: add fix infinite recursion vulnerability file: use new EVP functions rather than deprecated SHA functions flow: add logs to show different ways a flow can fail to create ftp_telnet: fix coverity errors and improve cmd_len configurability ftp_telnet: fix ftp_cmd_pipe_index handling ftp_telnet: Handle malformed traffic in ftp to generate alert hash: update hashes to use new EVP functions, thanks to http_inspect: add urlencoded to content-type list http_inspect: fix coverity error iec104: fix IEC 104 SQ0 bounds checks by removing duplicate asdu_size_map entries and using IO_GROUP sizes, preventing out-of-bounds reads iec104: validate Type I length to prevent ASDU out-of-bounds read ips_options: fix cursor position for byte_extract ips_options: reset PCRE rule counts on new configuration loaded main: update dioctl daqSnort latency common change mime: add unit tests for data fitting memory limit mime: add unit tests for data over memory limit mime: add unit tests for file logging mime: fix mime boundary parsing mime: ignore field collection if not configured mime: implement content parsing of multipart/form_data mime: improve form-data collection for incomplete boundaries mime: leave room for null-character in case of size limit hit mime: remove unused forward-declaration mime: rename class field to comply with the style mime: return error code if cannot add headers for logging pub_sub: add is_urlencoded method sip: fix out-of-bounds reads in sip_parse_sdp_m smb,dlp: update filename,filesize of FileInfo handling to enable dlp evaluation for repeated txns smtp: usage of config cmds snort2lua: fix failure in converting patterns containing commas snort_ml: enable client body scanning by default snort_ml: scan multipart form data ssl: free certificate data if certificate length is 0 ssl: tls client hello check out of bounds fix unified2: use proper API for obtaining VLAN ID from packet % snort --version ,,_ -*> Snort++ <*- o" )~ Version 3.10.1.0 '''' By Martin Roesch & The Snort Team http://snort.org/contact#team Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved. Copyright (C) 1998-2013 Sourcefire, Inc., et al. Using DAQ version 3.0.24 Using Vectorscan version 5.4.12 2026-01-11 Using libpcap version 1.10.5 (with TPACKET_V3) Using LuaJIT version 2.1.0-beta3 Using LZMA version 5.8.1 Using OpenSSL 3.5.4 30 Sep 2025 Using PCRE2 version 10.47 2025-10-21 Using ZLIB version 1.3.1 Signed-off-by: John Audia --- diff --git a/net/snort3/Makefile b/net/snort3/Makefile index 5b2dc6c14f..e7490783b3 100644 --- a/net/snort3/Makefile +++ b/net/snort3/Makefile @@ -6,12 +6,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=snort3 -PKG_VERSION:=3.10.0.0 +PKG_VERSION:=3.10.1.0 PKG_RELEASE:=1 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz PKG_SOURCE_URL:=https://codeload.github.com/snort3/snort3/tar.gz/$(PKG_VERSION)? -PKG_HASH:=fbd6619e612998330f8459486158a3ea571473218628d9011982aaf238e480e2 +PKG_HASH:=fca496990d37adaf1ba9d61b7a89388a1a78b3d59bdc5980bffb39c616e0584f PKG_MAINTAINER:=W. Michael Petullo , John Audia PKG_LICENSE:=GPL-2.0-only