-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 25 Mar 2020 21:59:30 +0100 Source: snort Architecture: source Version: 2.9.15.1-1 Distribution: unstable Urgency: medium Maintainer: Javier Fernández-Sanguino Peña <jfs@debian.org> Changed-By: Javier Fernández-Sanguino Peña <jfs@debian.org> Closes: 816964 827593 861842 862100 902554 910452 952296 Changes: snort (2.9.15.1-1) unstable; urgency=medium . * Updated to latest upstream release (Closes: #861842, #827593) (LP: #1669257) * debian/patches: Refresh patches with changes of new release - config: Update location of libraries from /usr/lib/snort_dynamicengine/ to usr/lib/i386-linux-gnu/snort_dynamicengine/ * debian/compat Use debhelper compatibility version 12 * debian/rules: Switch to dh - Fixes build errors with the PDF file (Closes: #952296) - Fixes configure for the build architecture (Closes: #902554) * debian/control: - Update sources to point to new repository in Salsa - Add additional libraries required by the latest upstream - Add dependency on lsb-base in snort as it ships a init.d file - Move to https homepage * debian/{snort-doc.doc-base.manual,snort-doc.doc-base.paper}: Adjust file to new location of file at /usr/doc/snort (was /usr/doc/snort-doc) * debian/snort.logrotate: Created to install the logrotate file using debhelper * rename snort.cron.daily to snort-common.cron.daily so it is install in the snort-common package by debelper * debian/snort.preinst: - Instead of recursively changing the logdir change the logdir first and then all the files in it (if any) [lintian fix] * debian/snort-doc.docs: Remove documents that are already provided by the snort package * debian/{snort.init-d,snort.postinst}: Use /run instead of /var/run and place the PIDFILES under /run/snort, creating it if it is required. Also provide the pidfile location to the Snort program, otherwise it would be created in /var/log/snort/ (LP: #1006982) * debian/snort.init-d: Do not set a default value for DEBIAN_SNORT_HOME_NET, if it is not defined then the value is not passed over to Snort. This allows users to set an empty value and define the configuration in /etc/snort/snort.conf (or /etc/snort/snort.$interface.conf instead. (LP: #566543) * debian/copyright: Update list of maintainers as well as copyright holders * debian/patches/documentation_debian: Create a patch to document Debian specific changes and configuration (e.g. alert and logging) describing how to read the Snort logs (Closes: 910452) * debian/patches/config: Change the configuration to also log an alert file log and log also alerts to Syslog * debian/snort.config: - Try to find the system network interface instead of using a default (eth0) name. This should make unattended package installation work for those systems indepently of how their network names are defined (e.g. laptops). This was suggested by Thomas d'Otreppe in the Ubuntu bugs and based on the number of bugs in Ubuntu appears to be a fairly common need. (LP: #996450, #95868, #876616, #655116, #642682, #585523) (LP: #572639, #524992, #477590, #465387, #465340, #402936) (LP: #290456, #1805338, #1794931, #1791438, #1771690, #1756664) (LP: #1735010, #1710478, #1707324, #1626325, #1604184, #1588960) (LP: #1570517, #1484733, #1398969, #1310182, #1273021, #1231833) (LP: #1222754, #1215408, #1207981, #1207237, #1181514, #1175892) (LP: #1175264, #1161358, #1158169, #1116013, #1065121, #1064478) (LP: #1061459, #1031917) - Add also debugging messages as, based on the number of reports in Ubuntu, there seems to be many cases where the users install the package (with high debconf priority) and the proper network interface is not defined, leading to errors in Snort startup. This should help debuggin better automated bug reports by providing more information. - Remove code fixing obsolete options from 2.8.5.2-2 as this version is already quite old (LP: #996450) * debian/snort.preinst: Enable debugging using $DEBIAN_SCRIPT_DEBUG variable as already used in snort.config and snort.postint * debian/snort.debian.conf: Document the configuration file better and remove references to the flavour packages as these were removed already in 2.9.3.1-1 * debian/po: Update pt_BR translation (Closes: #816964) * debian/po: Update ES translation * debian/patches/config, debian/snort-common.cron.daily, debian/snort-stat.8: Add a new log file for fast alert logging under /var/log/snort/snort.alert.fast to be used by the snort-stat script. Adjust the default configuration, the manual page accordingly. This should fix the issues encountered when enabling the daily reports. (Closes: #862100) * debian/patches/config_disabled_rules: refresh and disable also ICMP informational rules (very chatty in normal environments, but useful for debugging Snort) Checksums-Sha1: 789d275e9d7d7a0734db30241f5b98e41cae0875 2444 snort_2.9.15.1-1.dsc dc8c89125c27153ffd69f27fbd60b95b9d1cbfe0 6618999 snort_2.9.15.1.orig.tar.gz 8c757a4526b4b5b3b17442893d291e9e94f151db 752640 snort_2.9.15.1-1.debian.tar.xz 53d8c4ed7f553bc4db81658e21d110a821fefae8 12175 snort_2.9.15.1-1_i386.buildinfo Checksums-Sha256: 09319c50b0ca3ebd6112fb348dcfc77163e964fd779bb01e12960e613ab9d9d4 2444 snort_2.9.15.1-1.dsc 2cccfc1d1a706586cd47ae9f085a7d5e4e36390b8e9c28cd2020b4b5b587f6c3 6618999 snort_2.9.15.1.orig.tar.gz cba52ee5f27e5ed6cad8761c22b4861816041b1da61d8d1ccae5b2fe29e0ec3f 752640 snort_2.9.15.1-1.debian.tar.xz f17dfad48c30795ddf9835b06b348a923ce85b846fbea719fa5361126ed6190f 12175 snort_2.9.15.1-1_i386.buildinfo Files: a7f4408bdaede8d1c165b645b7aa9bdd 2444 net optional snort_2.9.15.1-1.dsc 1021a58c7429a782d6d1917b36988923 6618999 net optional snort_2.9.15.1.orig.tar.gz b87e54d660bfa90d33f7ba53b5ab92f3 752640 net optional snort_2.9.15.1-1.debian.tar.xz 8d7a2e7fbde2271fd8e97b91afa0a9e4 12175 net optional snort_2.9.15.1-1_i386.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEFQ8Kq6ttIR3DT+AOix9vSKslf5gFAl6U12oACgkQix9vSKsl f5iruhAAhQoQ7RXEi547F4Lg0e2qyisSq+U4mmRp+VJdMnhGTcFTtg0A1gsAIT9F HfoKlC48xJ112vxCahos9sZVPrz+mk+EH+iEJ27ByjuTilhR8+Xn04drHYUMFTL5 TLL9zzaqlWdrR5k1nq3b/7A9eCRGYDhVul79sRweXdW1EQjlRCVRvbyy3RkQLLLH mqS3CuWCONVqmHDcRZcpLfthohJXezfedOBeqqr7wR9ziR5kMJ06aJ4S5jwoH8vz GR20/kmdFIJG8RZeueNBhE3/fAfmmALlKZslE5TcYJmwJEcov7F8HCJMRcKvB3VF LZdyPgfA3t0QufgiN5Tr8IaPzjtPmXDiySMQu22WY2miZLP9e1cZ7Ut2v1mf7S+Q d0+VneJOfPrAWTeGy1pv5eb2qw7E5/6efGKi0b5dxiRrYkgl04hgQdnK/Zk+UK5M 9tprkUyd/hhBgu+ezfjy6ebm/hPUqHPm2p+vI9uv6oRPYFiwopPvdGxb+DiycSKt EWAmsAgrwE/uy2nervQDyPqkPU6V+GnSVTRMk8/PKYpU0lvP7VMdx9es9xEYOZTf qeV2oDEslcR+fZ7oWKSR2Lt/1GeqVJ7bQNs502LyseGBkSJYwddSAJU84it+ARXr zOl2zRYwAbXTPqdR9y0UvvwDNAu5bzk37Qu0U8We/63cwJiEWBQ= =q4I4 -----END PGP SIGNATURE-----
