Accepted snort 2.9.15.1-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 25 Mar 2020 21:59:30 +0100
Source: snort
Architecture: source
Version: 2.9.15.1-1
Distribution: unstable
Urgency: medium
Maintainer: Javier Fernández-Sanguino Peña <jfs@debian.org>
Changed-By: Javier Fernández-Sanguino Peña <jfs@debian.org>
Closes: 816964 827593 861842 862100 902554 910452 952296
Changes:
snort (2.9.15.1-1) unstable; urgency=medium
.
* Updated to latest upstream release (Closes: #861842, #827593)
(LP: #1669257)
* debian/patches: Refresh patches with changes of new release
- config: Update location of libraries from /usr/lib/snort_dynamicengine/
to usr/lib/i386-linux-gnu/snort_dynamicengine/
* debian/compat Use debhelper compatibility version 12
* debian/rules: Switch to dh
- Fixes build errors with the PDF file (Closes: #952296)
- Fixes configure for the build architecture (Closes: #902554)
* debian/control:
- Update sources to point to new repository in Salsa
- Add additional libraries required by the latest upstream
- Add dependency on lsb-base in snort as it ships a init.d file
- Move to https homepage
* debian/{snort-doc.doc-base.manual,snort-doc.doc-base.paper}: Adjust
file to new location of file at /usr/doc/snort (was /usr/doc/snort-doc)
* debian/snort.logrotate: Created to install the logrotate file using
debhelper
* rename snort.cron.daily to snort-common.cron.daily so it is install
in the snort-common package by debelper
* debian/snort.preinst:
- Instead of recursively changing the logdir change the logdir first
and then all the files in it (if any) [lintian fix]
* debian/snort-doc.docs: Remove documents that are already provided by the
snort package
* debian/{snort.init-d,snort.postinst}: Use /run instead of /var/run and
place the PIDFILES under /run/snort, creating it if it is required.
Also provide the pidfile location to the Snort program, otherwise it
would be created in /var/log/snort/ (LP: #1006982)
* debian/snort.init-d: Do not set a default value for DEBIAN_SNORT_HOME_NET,
if it is not defined then the value is not passed over to Snort. This
allows users to set an empty value and define the configuration in
/etc/snort/snort.conf (or /etc/snort/snort.$interface.conf instead.
(LP: #566543)
* debian/copyright: Update list of maintainers as well as copyright holders
* debian/patches/documentation_debian: Create a patch to document Debian
specific changes and configuration (e.g. alert and logging) describing
how to read the Snort logs (Closes: 910452)
* debian/patches/config: Change the configuration to also log an alert file
log and log also alerts to Syslog
* debian/snort.config:
- Try to find the system network interface instead of using a default
(eth0) name. This should make unattended package installation work for
those systems indepently of how their network names are defined (e.g.
laptops). This was suggested by Thomas d'Otreppe in the Ubuntu bugs
and based on the number of bugs in Ubuntu appears to be a fairly
common need.
(LP: #996450, #95868, #876616, #655116, #642682, #585523)
(LP: #572639, #524992, #477590, #465387, #465340, #402936)
(LP: #290456, #1805338, #1794931, #1791438, #1771690, #1756664)
(LP: #1735010, #1710478, #1707324, #1626325, #1604184, #1588960)
(LP: #1570517, #1484733, #1398969, #1310182, #1273021, #1231833)
(LP: #1222754, #1215408, #1207981, #1207237, #1181514, #1175892)
(LP: #1175264, #1161358, #1158169, #1116013, #1065121, #1064478)
(LP: #1061459, #1031917)
- Add also debugging messages as, based on the number of reports in
Ubuntu, there seems to be many cases where the users install the
package (with high debconf priority) and the proper network interface
is not defined, leading to errors in Snort startup. This should help
debuggin better automated bug reports by providing more information.
- Remove code fixing obsolete options from 2.8.5.2-2 as this version is
already quite old (LP: #996450)
* debian/snort.preinst: Enable debugging using $DEBIAN_SCRIPT_DEBUG variable
as already used in snort.config and snort.postint
* debian/snort.debian.conf: Document the configuration file better and
remove references to the flavour packages as these were removed already in
2.9.3.1-1
* debian/po: Update pt_BR translation (Closes: #816964)
* debian/po: Update ES translation
* debian/patches/config, debian/snort-common.cron.daily,
debian/snort-stat.8: Add a new log file for fast alert logging under
/var/log/snort/snort.alert.fast to be used by the snort-stat script.
Adjust the default configuration, the manual page accordingly. This should
fix the issues encountered when enabling the daily reports.
(Closes: #862100)
* debian/patches/config_disabled_rules: refresh and disable also ICMP
informational rules (very chatty in normal environments, but useful
for debugging Snort)
Checksums-Sha1:
789d275e9d7d7a0734db30241f5b98e41cae0875 2444 snort_2.9.15.1-1.dsc
dc8c89125c27153ffd69f27fbd60b95b9d1cbfe0 6618999 snort_2.9.15.1.orig.tar.gz
8c757a4526b4b5b3b17442893d291e9e94f151db 752640 snort_2.9.15.1-1.debian.tar.xz
53d8c4ed7f553bc4db81658e21d110a821fefae8 12175 snort_2.9.15.1-1_i386.buildinfo
Checksums-Sha256:
09319c50b0ca3ebd6112fb348dcfc77163e964fd779bb01e12960e613ab9d9d4 2444 snort_2.9.15.1-1.dsc
2cccfc1d1a706586cd47ae9f085a7d5e4e36390b8e9c28cd2020b4b5b587f6c3 6618999 snort_2.9.15.1.orig.tar.gz
cba52ee5f27e5ed6cad8761c22b4861816041b1da61d8d1ccae5b2fe29e0ec3f 752640 snort_2.9.15.1-1.debian.tar.xz
f17dfad48c30795ddf9835b06b348a923ce85b846fbea719fa5361126ed6190f 12175 snort_2.9.15.1-1_i386.buildinfo
Files:
a7f4408bdaede8d1c165b645b7aa9bdd 2444 net optional snort_2.9.15.1-1.dsc
1021a58c7429a782d6d1917b36988923 6618999 net optional snort_2.9.15.1.orig.tar.gz
b87e54d660bfa90d33f7ba53b5ab92f3 752640 net optional snort_2.9.15.1-1.debian.tar.xz
8d7a2e7fbde2271fd8e97b91afa0a9e4 12175 net optional snort_2.9.15.1-1_i386.buildinfo
-----BEGIN PGP SIGNATURE-----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=q4I4
-----END PGP SIGNATURE-----