From owner-cvs-all@FreeBSD.ORG  Thu Apr 17 14:45:07 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 36C4537B404; Thu, 17 Apr 2003 14:45:04 -0700 (PDT)
Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 5D73A43F3F; Thu, 17 Apr 2003 14:45:04 -0700 (PDT)
	(envelope-from kris@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.12.6/8.12.6) with ESMTP id h3HLj40U072671;
	Thu, 17 Apr 2003 14:45:04 -0700 (PDT)
	(envelope-from kris@repoman.freebsd.org)
Received: (from kris@localhost)
	by repoman.freebsd.org (8.12.6/8.12.6/Submit) id h3HLj3qt072670;
	Thu, 17 Apr 2003 14:45:03 -0700 (PDT)
Message-Id: <200304172145.h3HLj3qt072670@repoman.freebsd.org>
From: Kris Kennaway <kris@FreeBSD.org>
Date: Thu, 17 Apr 2003 14:45:03 -0700 (PDT)
To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org,
	cvs-all@FreeBSD.org
X-FreeBSD-CVS-Branch: HEAD
Subject: cvs commit: ports/security/snort Makefile distinfo pkg-plist
 ports/security/snort/files patch-snort.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 17 Apr 2003 21:45:07 -0000

kris        2003/04/17 14:45:03 PDT

  FreeBSD ports repository

  Modified files:
    security/snort       Makefile distinfo pkg-plist 
    security/snort/files patch-snort.c 
  Log:
  Update to snort 2.0.0.  This fixes a security vulnerability:
  
    The Sourcefire Vulnerability Research Team has learned of an integer
    overflow in the Snort stream4 preprocessor used by the Sourcefire
    Network Sensor product line. The Snort stream4 preprocessor
    (spp_stream4) incorrectly calculates segment size parameters during
    stream reassembly for certain sequence number ranges which can lead to
    an integer overflow that can be expanded to a heap overflow.
  
  PR:     51106
  Submitted by:   Sergey A. Osokin <osa@FreeBSD.org.ru>
  
  Revision  Changes    Path
  1.34      +2 -2      ports/security/snort/Makefile
  1.19      +1 -1      ports/security/snort/distinfo
  1.4       +7 -32     ports/security/snort/files/patch-snort.c
  1.10      +0 -2      ports/security/snort/pkg-plist