New features

 Support for the following keywords: detection_filter, http_client_body
 The HTTP parser can now set server personalities
 threshold.config support
 The experimental CUDA code now also works on x86_64
 IP address only rules for IPv6 are now supported as well
 Suricata can now write a pid file (pass —pidfile )
 A fuzzer script was added to the code base
 Policy lookup for defrag module

Improvements

 Much better average and worstcase performance in the detection engine
 More validation at signature loading stage
 Libnet 1.1 is now optional
 Negated uricontent and http_cookie matching is now supported
 Lots of fixes of issues found by Valgrind’s DRD, CLANG and Parfait.
 Threads are named now in "top" (Linux only atm).
 Unified1 file handling is improved

Bugs fixed

Many :) Several segmentation faults, upgrading is highly recommended.