[ubuntu/precise] snort 2.9.2-3ubuntu1 (Accepted)

Jean-Louis Dupond jean-louis at dupond.be
Tue Feb 14 11:30:43 UTC 2012


snort (2.9.2-3ubuntu1) precise; urgency=low

  * Merge from Debian testing. (LP: #931454)  Remaining changes:
    - debian/rules: use mysql_config to find libraries to fix FTBFS with
      multiarch libmysqlclient.
  * Dropped "Fixed typo in snort.8": patched upstream.

snort (2.9.2-3) unstable; urgency=low

  * Restore code from the 2.8.5.2-5 package onwards which was lost when
    the version of experimental was moved to the archive.
     - Now /var/lib/snort is created through package configuration, as
       it should have been
     - Remove md5sum files when purging (Closes: #657038)
  * debian/rules:
      - Enable IPv6 support which was optional in version 2.8 for the Snort
        binary package. This is not enabled for the database binary packages
        (snort-pgsql and snort-mysql) as the database schemas do not support
        IPv6.  (Closes: #633064) (LP: #703707)
      - Include the quilt makefile and add dependencies in -stamp and
        clean targets
  * debian/snort.init.d:
      - Do not abort if the package is not configured to use a database but
        the db-pending-config semaphore is found.  Remove it instead and
        continue. This can happen if a database-related package was installed,
        removed and then 'snort' is installed afterwards.
        (LP: #316878, #639755, #722488, #754230, #798608, #876615, #816634, #891904, #918250)
  * debian/snort-{mysql,pgsql}.postrm:
      - Remove the db-pending-config semaphore file when removing the package.
        This prevents errors with the snort.init.d logic if a database package
        is left unconfigured and then replaced with the snort (non-database)
        package.
  * debian/README-database.Debian: Indicate that database support will be
    deprecated in 2.9 and document that IPv6 is not supported either
  * debian/control:
     - Add Build-Depends on quilt
     - Add VCS entries
     - Put the complete maintainer's name in UTF-8
     - Change Uploaders, add Andrew Pollock and remove Pascal Hakim
     - Update Standards Version

snort (2.9.2-2) unstable; urgency=low

  * debian/control:  Add net-tools to Depends: of snort, snort-mysql and
    snort-pgsql since 'ifconfig' is required for the configuration script
    to work. (Closes: #656445)
  * debian/snort{,-mysql,-psql}.postinst: Create the checksum directory if it
    does not exist right at the beginning since it might not be created.
    (Closes: #656445)

snort (2.9.2-1) unstable; urgency=low

  [ Andrew Pollock ]
  * New upstream release, upload to unstable
     - Fixes CVE-2009-3641: DoS while printing specially-crafted IPv6 packet
       using the -v option (Closes: 553584)
     - The package no longer build-depends on iptables-dev and the negated list
       of architectures is no longer used (Closes: 634660)
     - debian/patches/config: Patch the configuration file to remove include
       files not currently available (Closes: #619446)
     - This version is fully supported rule-wise (LP: #872582)
  * Switch to dpkg-source 3.0 (quilt) format
  * Port across all changes from Snort 2.8.5.2-5 and later in unstable
  * debian/snort.postinst: create the directory that the checksum for
    snort.debian.conf will be created in if it doesn't already exist
  * debian/rules: tell dh_makeshlibs to not call ldconfig in the
    preinst/postinst of snort-common-libraries
  * debian/rules: don't install README.WIN32 into snort-doc

  [ Javier Fernandez-Sanguino Peña ]
  * debian/rules:
     - Set enable-zlib when configuring all packages to force it to be
       enabled as this is required by the http_inspect preprocessor which
       is enabled by default (Closes: #631854)
     - Included (commented) the patch provided by Clint Byrum and included in
       Ubuntu to prevent snort from FTFS with libmysqlclient-dev which will be
       multiarch in the future. The patch uses mysql_config to find libraries
       to fix FTBFS with multiarch libmysqlclient. Not enabled since the
       version of libmysqlclient in unstable currently does not support the
       --variable=pkglibdir option
  * debian/snort{,-inline}.config: Use LC_ALL=C when calling ifconfig to make
    the postinst work when ifconfig's output is internationalised (Closes: 577033)
  * debian/control: Fix link in the rules package, point to
    http://www.snort.org/snort-rules/ (Closes: 646547)
  * debian/my/snort-stat: Modify so that alerts with Priority but without classification
    are analysed when parsing syslog information. Also set the class to 'Undefined'
    instead of leaving it empty. (Closes: 590061)
  * po-debconf translation updates:
    - Danish, provided by Joe Dalton (Closes: 638678)
    - Dutch, provided by Jeroen Schot (Closes: 654239)

Date: Tue, 14 Feb 2012 12:47:26 +0200
Changed-By: Jean-Louis Dupond <jean-louis at dupond.be>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Stefano Rivera <launchpad at rivera.za.net>
https://launchpad.net/ubuntu/precise/+source/snort/2.9.2-3ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 14 Feb 2012 12:47:26 +0200
Source: snort
Binary: snort snort-common snort-doc snort-mysql snort-pgsql snort-rules-default snort-common-libraries
Architecture: source
Version: 2.9.2-3ubuntu1
Distribution: precise
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jean-Louis Dupond <jean-louis at dupond.be>
Description: 
 snort      - flexible Network Intrusion Detection System
 snort-common - flexible Network Intrusion Detection System [common files]
 snort-common-libraries - flexible Network Intrusion Detection System ruleset
 snort-doc  - Documentation for the Snort IDS [documentation]
 snort-mysql - flexible Network Intrusion Detection System [MySQL]
 snort-pgsql - flexible Network Intrusion Detection System [PostgreSQL]
 snort-rules-default - flexible Network Intrusion Detection System ruleset
Closes: 553584 577033 590061 619446 631854 633064 634660 638678 646547 654239 656445 657038
Launchpad-Bugs-Fixed: 316878 639755 703707 722488 754230 798608 816634 872582 876615 891904 918250 931454
Changes: 
 snort (2.9.2-3ubuntu1) precise; urgency=low
 .
   * Merge from Debian testing. (LP: #931454)  Remaining changes:
     - debian/rules: use mysql_config to find libraries to fix FTBFS with
       multiarch libmysqlclient.
   * Dropped "Fixed typo in snort.8": patched upstream.
 .
 snort (2.9.2-3) unstable; urgency=low
 .
   * Restore code from the 2.8.5.2-5 package onwards which was lost when
     the version of experimental was moved to the archive.
      - Now /var/lib/snort is created through package configuration, as
        it should have been
      - Remove md5sum files when purging (Closes: #657038)
   * debian/rules:
       - Enable IPv6 support which was optional in version 2.8 for the Snort
         binary package. This is not enabled for the database binary packages
         (snort-pgsql and snort-mysql) as the database schemas do not support
         IPv6.  (Closes: #633064) (LP: #703707)
       - Include the quilt makefile and add dependencies in -stamp and
         clean targets
   * debian/snort.init.d:
       - Do not abort if the package is not configured to use a database but
         the db-pending-config semaphore is found.  Remove it instead and
         continue. This can happen if a database-related package was installed,
         removed and then 'snort' is installed afterwards.
         (LP: #316878, #639755, #722488, #754230, #798608, #876615, #816634, #891904, #918250)
   * debian/snort-{mysql,pgsql}.postrm:
       - Remove the db-pending-config semaphore file when removing the package.
         This prevents errors with the snort.init.d logic if a database package
         is left unconfigured and then replaced with the snort (non-database)
         package.
   * debian/README-database.Debian: Indicate that database support will be
     deprecated in 2.9 and document that IPv6 is not supported either
   * debian/control:
      - Add Build-Depends on quilt
      - Add VCS entries
      - Put the complete maintainer's name in UTF-8
      - Change Uploaders, add Andrew Pollock and remove Pascal Hakim
      - Update Standards Version
 .
 snort (2.9.2-2) unstable; urgency=low
 .
   * debian/control:  Add net-tools to Depends: of snort, snort-mysql and
     snort-pgsql since 'ifconfig' is required for the configuration script
     to work. (Closes: #656445)
   * debian/snort{,-mysql,-psql}.postinst: Create the checksum directory if it
     does not exist right at the beginning since it might not be created.
     (Closes: #656445)
 .
 snort (2.9.2-1) unstable; urgency=low
 .
   [ Andrew Pollock ]
   * New upstream release, upload to unstable
      - Fixes CVE-2009-3641: DoS while printing specially-crafted IPv6 packet
        using the -v option (Closes: 553584)
      - The package no longer build-depends on iptables-dev and the negated list
        of architectures is no longer used (Closes: 634660)
      - debian/patches/config: Patch the configuration file to remove include
        files not currently available (Closes: #619446)
      - This version is fully supported rule-wise (LP: #872582)
   * Switch to dpkg-source 3.0 (quilt) format
   * Port across all changes from Snort 2.8.5.2-5 and later in unstable
   * debian/snort.postinst: create the directory that the checksum for
     snort.debian.conf will be created in if it doesn't already exist
   * debian/rules: tell dh_makeshlibs to not call ldconfig in the
     preinst/postinst of snort-common-libraries
   * debian/rules: don't install README.WIN32 into snort-doc
 .
   [ Javier Fernandez-Sanguino Peña ]
   * debian/rules:
      - Set enable-zlib when configuring all packages to force it to be
        enabled as this is required by the http_inspect preprocessor which
        is enabled by default (Closes: #631854)
      - Included (commented) the patch provided by Clint Byrum and included in
        Ubuntu to prevent snort from FTFS with libmysqlclient-dev which will be
        multiarch in the future. The patch uses mysql_config to find libraries
        to fix FTBFS with multiarch libmysqlclient. Not enabled since the
        version of libmysqlclient in unstable currently does not support the
        --variable=pkglibdir option
   * debian/snort{,-inline}.config: Use LC_ALL=C when calling ifconfig to make
     the postinst work when ifconfig's output is internationalised (Closes: 577033)
   * debian/control: Fix link in the rules package, point to
     http://www.snort.org/snort-rules/ (Closes: 646547)
   * debian/my/snort-stat: Modify so that alerts with Priority but without classification
     are analysed when parsing syslog information. Also set the class to 'Undefined'
     instead of leaving it empty. (Closes: 590061)
   * po-debconf translation updates:
     - Danish, provided by Joe Dalton (Closes: 638678)
     - Dutch, provided by Jeroen Schot (Closes: 654239)
Checksums-Sha1: 
 d75992ea24d93aad9bfda215ff78eb1a2da7d804 2535 snort_2.9.2-3ubuntu1.dsc
 b903e6e71b0bbf58703d9b1d8d9253807b9656f8 6467539 snort_2.9.2.orig.tar.gz
 9b4ad65858b165bfc7f85ede42f690c3c840b0bd 1579228 snort_2.9.2-3ubuntu1.debian.tar.gz
Checksums-Sha256: 
 df36288b5b60a47862401e2d8cad4bea50f5a78f455f4cd03e7f8768560c2857 2535 snort_2.9.2-3ubuntu1.dsc
 04d375b627dd256d6257f2cbe5a770e4552e3f35d5e2100b97f75426b600d8cb 6467539 snort_2.9.2.orig.tar.gz
 d2c24ac4ccb572915f59b26593da19fa126c531f9cc00ce5a326fbd8786ab42f 1579228 snort_2.9.2-3ubuntu1.debian.tar.gz
Files: 
 3835e76f54b06a84f92b606b499cae71 2535 net optional snort_2.9.2-3ubuntu1.dsc
 22fa07ba915535b151329056439ae194 6467539 net optional snort_2.9.2.orig.tar.gz
 5bac8c120f1457fcfa82170701a2d797 1579228 net optional snort_2.9.2-3ubuntu1.debian.tar.gz
Original-Maintainer: Javier Fernández-Sanguino Peña <jfs at debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=zqXn
-----END PGP SIGNATURE-----


More information about the Precise-changes mailing list