[ubuntu/quantal] snort 2.9.2.2-3 (Accepted)

Jeremy Bicha jeremy at bicha.net
Wed Aug 8 11:18:11 UTC 2012


snort (2.9.2.2-3) unstable; urgency=medium

  [ Upload target towards Wheezy fixing some important bugs
    and substantially improving the information provided on the
    packages to clarify user expectations ]
  * Acknowledge previous NMU
  * debian/patches/config: Update the patch to: 
     - use absolute paths instead of relative paths to point to
       the white list and black list used by the reputation
       pre-processor.
     - disable the reputation as we do not ship any white/black lists
       by default (which causes it to fail at startup) and also
       because this preprocessor is experimental.

       Both changes fix the bug that prevented the package from being
       configured due to errors when starting up Snort with the 
       default configuration (Closes: #677810)

      - Add a comment to /etc/snort/snort.conf documenting for users
        reading the file that preinstalled rules are surely out of date.

  * debian/patches/config_disabled_rules: Comment out shellcode rules as these
    have a huge impact in performance unless properly tuned.
  * debian/patches/rules: Fix the definition of many SIP rules (defined
    as 'alert ip any any'. These were generating a lot of false positives
    in environment were enabled. Regardless of the change comment out SIP
    rules since they are outdate can generate many false alarms unless
    properly defined.  (Closes: #626596, #680303).
  * debian/control: Adjust description of snort-rules-default to indicate
    users that the ruleset provided should not be considered up-to-date.
    Encourage users to obtain additional/upgraded rules elsewhere.
  * debian/snort-rules-default.README.Debian: Include more information to
    potential users on the issues related to the default ruleset provided
    (and why it is out of date) as well as pointers as to where obtain
    additional rulesets. Some of this information is also in the NEWS file
    but is easy to miss to new users.

Date: 2012-08-08 04:24:21.139463+00:00
Changed-By: Javier Fernández-Sanguino <jfs at debian.org>
Signed-By: Jeremy Bicha <jeremy at bicha.net>
https://launchpad.net/ubuntu/quantal/+source/snort/2.9.2.2-3
-------------- next part --------------
Sorry, changesfile not available.


More information about the Quantal-changes mailing list