This week SourceFire published a security advisory for (among others) Snort version 184.108.40.206, on which Snort_inline is based. So I took some time to update Snort_inline. Normally this would have taken Will and me quite some time, but since we switched to using svn those days are gone. I was able to update it in under a hour. I was very happy I blogged about the procedure to follow, since I had already forgotten about it😉
Will is preparing a release based on this, which should also build with ClamAV 0.90.
Anyway, svn is up to date, so if you are using Snort_inline and rely on the DCE/RPC preprocessor, please pull the code from svn.
Check it out!🙂