Open-Source Snort2 Reaches End of Support as Snort3 Receives Security Updates

All versions of open-source Snort2, including Snort 2.9.20, have reached end-of-life and end-of-support. Engine development, maintenance releases, and software package updates have ended, and Cisco Talos has discontinued rule support and vulnerability detections for the platform. Legacy deployments will no longer receive updates addressing emerging threats, making migration a priority for organizations relying on Snort2 for network intrusion detection.

Open-source Snort 3.12.4.0 is available with security hardening, defect fixes, and performance improvements following extensive security reviews and testing. The announcement directs users to migration documentation, build guides, and the snort2lua configuration-conversion utility. Separately, a June 2025 vulnerability listing identified multiple denial-of-service vulnerabilities involving Snort 3 in Cisco products; the supplied listing does not specify affected versions or fixes, so organizations should verify product-specific advisories and remediation requirements alongside their migration plans.