From robin@yirdis.nl  Wed Aug  8 07:18:08 2007
Return-Path: <robin@yirdis.nl>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id E387216A419;
	Wed,  8 Aug 2007 07:18:08 +0000 (UTC)
	(envelope-from robin@yirdis.nl)
Received: from mail.yirdis.nl (82-148-208-109.fiber.unet.nl [82.148.208.109])
	by mx1.freebsd.org (Postfix) with ESMTP id 5ECF113C468;
	Wed,  8 Aug 2007 07:18:07 +0000 (UTC)
	(envelope-from robin@yirdis.nl)
Received: from server.yirdis.net (localhost [127.0.0.1])
	by mail.yirdis.nl (8.13.8/8.13.8) with ESMTP id l787Hv3s019736
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Wed, 8 Aug 2007 09:17:57 +0200 (CEST)
	(envelope-from robin@server.yirdis.net)
Received: (from robin@localhost)
	by server.yirdis.net (8.13.8/8.13.8/Submit) id l787HvVg019735;
	Wed, 8 Aug 2007 09:17:57 +0200 (CEST)
	(envelope-from robin)
Message-Id: <200708080717.l787HvVg019735@server.yirdis.net>
Date: Wed, 8 Aug 2007 09:17:57 +0200 (CEST)
From: Robin Gruyters <r.gruyters@yirdis.nl>
To: FreeBSD-gnats-submit@freebsd.org
Cc: clsung@freebsd.org
Subject: [PATCH] security/snort: update to 2.7.0.1
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         115294
>Category:       ports
>Synopsis:       [PATCH] security/snort: update to 2.7.0.1
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    clsung
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          update
>Submitter-Id:   current-users
>Arrival-Date:   Wed Aug 08 07:20:01 GMT 2007
>Closed-Date:    Tue Aug 14 00:05:04 GMT 2007
>Last-Modified:  Tue Aug 14 00:10:02 GMT 2007
>Originator:     Robin Gruyters
>Release:        FreeBSD 6.2-RELEASE-p5 i386
>Organization:
YIRDIS B.V.
>Environment:
System: FreeBSD server.yirdis.net 6.2-RELEASE-p5 FreeBSD 6.2-RELEASE-p5 #4: Thu May 31 10:58:52 CEST 2007
>Description:
- Update to 2.7.0.1

Tested on two systems, and until works perfectly.

Changelog snort-2.7.0.1:
* etc/snort.conf:
  Turn off flow since Stream5 is now enabled by default.
* src/snort.c:
  Fix printing of threshold counts until after all rules are read.
  This issue did not affect thresholding, only display of thresholding.
  Thanks to Jeffrey Denton for reporting the problem.
* src/sfutil/ipobj.c:
  Fix free of invalid pointer when using a negated IP list.
  This is used by sfportscan preprocessor configuration parsing.
  Thanks to Anders Ostrem for reporting the problem.
* src/preprocessors/Stream5/snort_stream5_session.c:
  Fixed issue when experimental ICMP tracking is used without using
  the TCP or UDP session tracking.  ICMP was attempting to lookup
  TCP or UDP sessions from uninitialized session cache.  Thanks to
  Koji Shikata for reporting the problem.
* src/preprocessors/Stream5/snort_stream5_tcp.c:
  Fixed invalid session pointer when rule tries to use flowbits after
  session ends.  Thanks to rmkml for initially reporting the problem.

Port maintainer (clsung@FreeBSD.org) is cc'd.

Generated with FreeBSD Port Tools 0.77
>How-To-Repeat:
>Fix:

--- snort-2.7.0.1.patch begins here ---
Index: Makefile
===================================================================
RCS file: /data3/Build/CVS/ports/security/snort/Makefile,v
retrieving revision 1.89
diff -u -r1.89 Makefile
--- Makefile	4 Aug 2007 11:41:18 -0000	1.89
+++ Makefile	7 Aug 2007 08:30:50 -0000
@@ -6,7 +6,7 @@
 #
 
 PORTNAME=	snort
-PORTVERSION=	2.7.0
+PORTVERSION=	2.7.0.1
 CATEGORIES=	security
 MASTER_SITES=	http://www.snort.org/dl/current/
 
Index: distinfo
===================================================================
RCS file: /data3/Build/CVS/ports/security/snort/distinfo,v
retrieving revision 1.49
diff -u -r1.49 distinfo
--- distinfo	24 Jul 2007 07:05:49 -0000	1.49
+++ distinfo	7 Aug 2007 08:31:02 -0000
@@ -1,3 +1,3 @@
-MD5 (snort-2.7.0.tar.gz) = f4f11f793599750614ee5c477744e648
-SHA256 (snort-2.7.0.tar.gz) = 77260162ce98fa6684699465f8f3a8f6b90decc475f51903d2f558e92056ce9d
-SIZE (snort-2.7.0.tar.gz) = 3905896
+MD5 (snort-2.7.0.1.tar.gz) = 06d3fa0b326dcdca59a19811f32b013a
+SHA256 (snort-2.7.0.1.tar.gz) = c9337c2acb34e34904e3fff8a2c31e1a3a92aa7776a9263454fd4dc5503721fa
+SIZE (snort-2.7.0.1.tar.gz) = 3905846
--- snort-2.7.0.1.patch ends here ---

>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports-bugs->clsung 
Responsible-Changed-By: edwin 
Responsible-Changed-When: Wed Aug 8 07:20:07 UTC 2007 
Responsible-Changed-Why:  
Over to maintainer 

http://www.freebsd.org/cgi/query-pr.cgi?pr=115294 
State-Changed-From-To: open->closed 
State-Changed-By: clsung 
State-Changed-When: Tue Aug 14 00:04:59 UTC 2007 
State-Changed-Why:  
Committed. Thank You. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=115294 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: ports/115294: commit references a PR
Date: Tue, 14 Aug 2007 00:04:56 +0000 (UTC)

 clsung      2007-08-14 00:04:49 UTC
 
   FreeBSD ports repository
 
   Modified files:
     security/snort       Makefile distinfo 
   Log:
   - Update to 2.7.0.1
   
   Tested on two systems, and until works perfectly.
   
   Changelog snort-2.7.0.1:
   * etc/snort.conf:
     Turn off flow since Stream5 is now enabled by default.
   * src/snort.c:
     Fix printing of threshold counts until after all rules are read.
     This issue did not affect thresholding, only display of thresholding.
     Thanks to Jeffrey Denton for reporting the problem.
   * src/sfutil/ipobj.c:
     Fix free of invalid pointer when using a negated IP list.
     This is used by sfportscan preprocessor configuration parsing.
     Thanks to Anders Ostrem for reporting the problem.
   * src/preprocessors/Stream5/snort_stream5_session.c:
     Fixed issue when experimental ICMP tracking is used without using
     the TCP or UDP session tracking.  ICMP was attempting to lookup
     TCP or UDP sessions from uninitialized session cache.  Thanks to
     Koji Shikata for reporting the problem.
   * src/preprocessors/Stream5/snort_stream5_tcp.c:
     Fixed invalid session pointer when rule tries to use flowbits after
     session ends.  Thanks to rmkml for initially reporting the problem.
   
   PR:             ports/115294
   Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
   
   Revision  Changes    Path
   1.90      +1 -1      ports/security/snort/Makefile
   1.50      +3 -3      ports/security/snort/distinfo
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 
>Unformatted:
