From owner-cvs-all@FreeBSD.ORG Tue Aug 14 00:04:50 2007 Return-Path: Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A619416A46C; Tue, 14 Aug 2007 00:04:50 +0000 (UTC) (envelope-from clsung@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 6597713C458; Tue, 14 Aug 2007 00:04:50 +0000 (UTC) (envelope-from clsung@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id l7E04oCX026654; Tue, 14 Aug 2007 00:04:50 GMT (envelope-from clsung@repoman.freebsd.org) Received: (from clsung@localhost) by repoman.freebsd.org (8.14.1/8.14.1/Submit) id l7E04nTH026653; Tue, 14 Aug 2007 00:04:49 GMT (envelope-from clsung) Message-Id: <200708140004.l7E04nTH026653@repoman.freebsd.org> From: Cheng-Lung Sung Date: Tue, 14 Aug 2007 00:04:49 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/security/snort Makefile distinfo X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Aug 2007 00:04:50 -0000 clsung 2007-08-14 00:04:49 UTC FreeBSD ports repository Modified files: security/snort Makefile distinfo Log: - Update to 2.7.0.1 Tested on two systems, and until works perfectly. Changelog snort-2.7.0.1: * etc/snort.conf: Turn off flow since Stream5 is now enabled by default. * src/snort.c: Fix printing of threshold counts until after all rules are read. This issue did not affect thresholding, only display of thresholding. Thanks to Jeffrey Denton for reporting the problem. * src/sfutil/ipobj.c: Fix free of invalid pointer when using a negated IP list. This is used by sfportscan preprocessor configuration parsing. Thanks to Anders Ostrem for reporting the problem. * src/preprocessors/Stream5/snort_stream5_session.c: Fixed issue when experimental ICMP tracking is used without using the TCP or UDP session tracking. ICMP was attempting to lookup TCP or UDP sessions from uninitialized session cache. Thanks to Koji Shikata for reporting the problem. * src/preprocessors/Stream5/snort_stream5_tcp.c: Fixed invalid session pointer when rule tries to use flowbits after session ends. Thanks to rmkml for initially reporting the problem. PR: ports/115294 Submitted by: Robin Gruyters Revision Changes Path 1.90 +1 -1 ports/security/snort/Makefile 1.50 +3 -3 ports/security/snort/distinfo