non port: security/snort/distinfo |
Number of commits found: 105 (showing only 100 on this page) |
Wednesday, 8 Jun 2022
|
20:02 Dan Langille (dvl)
security/snort: Update to 2.9.20
[*] New Additions
Added support for dns root queries and underflow.
Added support to get extra data from SMTP and HTTP into IPS event.
Added support for login success and failure eventing for IMAP and POP3.
Added support to handle empty string for SNI/CN/SAN/ORG.
[*] Improvements / Fix
Fixed a scenario where SSL traffic was not detected correctly.
Fixed security zones info in intrusion events.
Fixed URL lookup failure.
0839acb |
Wednesday, 30 Mar 2022
|
19:01 Dan Langille (dvl)
security/snort: Update to 2.9.19
re: https://blog.snort.org/2021/12/open-source-version-of-snort-29190.html
3174656 |
Tuesday, 6 Jul 2021
|
17:05 Dan Langille (dvl)
security/snort: Update to 2.9.18
45ccf3d |
Friday, 11 Jun 2021
|
14:51 Brad Davis (brd) Author: Bill Meeks
security/snort: Update to 2.9.17.1
Cherry-pick 018217c from pfsense/FreeBSD-ports:
Update Snort binary to latest 2.9.17.1 version from upstream.
Approved by: dvl (maintainer)
Sponsored by: Rubicon Communications, LLC ("Netgate")
8a16e2a |
Wednesday, 9 Dec 2020
|
16:48 dvl
Update to 2.9.17
re: https://blog.snort.org/2020/11/snort-29170-has-been-released.html
|
Tuesday, 1 Sep 2020
|
13:09 dvl
Update to 2.9.16.1
re: https://blog.snort.org/2020/08/snort-29161-has-been-released.html
* Added support for GCC version 10.1.1
* Added packet counters to make sure flows with one-way data don't pend forever.
* Fixed potential race condition between reload and exit path.
Notes for versions this port has skipped over:
re: https://blog.snort.org/2020/04/snort-29160-has-been-released.html
|
Monday, 6 Apr 2020
|
13:34 dvl
Update to 2.9.15.1
* Added support for glibc version 2.30.
* Fixed Snort core seen during SSL re-configuration.
* Fixed file access issues on files from SMB share.
https://blog.snort.org/2020/01/snort-29151-has-been-released.html
|
Thursday, 14 Nov 2019
|
14:28 dvl
Update to 2.9.15
[*] New Additions
* Added new debugs to print detection, file_processing and Preproc time
consumption info and verdict.
* Added support to detect new Korean file formats .egg and .alg in the file
preprocessor.
* Added support to detect new RAR file-type in the file preprocessor.
[*] Improvements / Fix
* Fix to generate ALERT if TEID value is zero in GTP v1 and v2 packets.
* Fix to whitelist ftp data sessions when no file policy exists.
* Fix RTF file magic to a more generic value to prevent evasions.
|
Monday, 5 Aug 2019
|
21:00 dvl
Upgrade to Upgrade to 2.9.14.1
Take maintainership.
PR: 239667
Submitted by: Gilbert Morgan <gmm@tutanota.com>
Approved by: zi (maintainer)
|
Friday, 26 Oct 2018
|
21:57 zi
- Update to 2.9.12
|
Wednesday, 24 Jan 2018
|
01:12 zi
- Update to 2.9.11.1
|
Monday, 22 May 2017
|
15:23 dvl
upgrade to 2.9.9.0
Approved by: zi (maintainer)
|
Thursday, 23 Jun 2016
|
01:56 zi
- Update to 2.9.8.3
|
Friday, 8 Jan 2016
|
16:50 zi
- Update to 2.9.8.0
|
Thursday, 24 Dec 2015
|
11:41 ak
- Fix various distinfo issues
Approved by: portmgr blanket
|
Wednesday, 21 Oct 2015
|
17:59 dvl
- Update to 2.9.7.6
Reviewed by: zi (maintainer)
Differential Revision: https://reviews.freebsd.org/D3963
|
Thursday, 23 Jul 2015
|
18:30 zi
- Update to 2.9.7.5
|
Wednesday, 27 May 2015
|
17:54 zi
- Update to 2.9.7.3
|
Friday, 13 Mar 2015
|
11:54 zi
- Update to 2.9.7.2
|
Friday, 24 Oct 2014
|
23:34 zi
- Update to 2.9.7.0
|
Tuesday, 22 Jul 2014
|
13:20 zi
- Update to 2.9.6.2
- Disable OPTION for FLEXRESP3 as it breaks the build if it is disabled
|
Thursday, 15 May 2014
|
19:34 zi
- Update to 2.9.6.1
|
Monday, 24 Feb 2014
|
22:58 zi
- Update to 2.9.6.0
|
Friday, 3 Jan 2014
|
18:34 zi
- Update to 2.9.5.6
- Add STAGE support [1]
- Remove SNORTSAM support due to lack of upstream support [1]
- Makefile cleanup [1]
- Use new configure magic [1]
PR: ports/185274 [1]
Submitted by: ohauer@ [1]
|
Sunday, 22 Sep 2013
|
16:46 zi
- Update to 2.9.5.5
|
Monday, 26 Aug 2013
|
21:01 zi
- Update to 2.9.5.3
- Don't build example dynamic preprocessor
|
Sunday, 28 Apr 2013
|
13:46 zi
- Update to 2.9.4.6
|
Tuesday, 16 Apr 2013
|
15:13 zi
- Update to 2.9.4.5
Feature safe: yes
|
Tuesday, 5 Mar 2013
|
19:44 zi
- Update to 2.9.4.1
- Migrate to new 'created by' header
|
Tuesday, 4 Dec 2012
|
16:35 zi
- Update to 2.9.4
Feature safe: yes
|
Friday, 10 Aug 2012
|
01:29 zi
- Update to 2.9.3.1
|
Monday, 23 Jul 2012
|
14:19 zi
- Update to 2.9.3
- Convert to OptionsNG
|
Tuesday, 15 May 2012
|
22:16 zi
- Update to 2.9.2.3
|
Friday, 20 Apr 2012
|
21:57 zi
- Unbreak SNORTSAM support
- Do not bump PORTREVISION for non-default OPTION
PR: ports/166798
Submitted by: scheidell@
Obtained from: snortsam.net
|
Tuesday, 27 Mar 2012
|
23:14 zi
- Update to 2.9.2.2
- Mark SNORTSAM support as BROKEN due to build failures with 2.9.1.2 patch
Feature safe: yes
|
Saturday, 21 Jan 2012
|
02:46 zi
- Update to 2.9.2.1
- Fix issue when NOPORTDOCS is defined
|
Thursday, 15 Dec 2011
|
00:50 zi
- Update to 2.9.2
|
Wednesday, 14 Dec 2011
|
00:58 zi
- Bring back snortsam patches
- Do not bump PORTREVISION
PR: ports/162740
Submitted by: Michael Scheidell <scheidell@freebsd.org>
Feature safe: yes
|
Monday, 21 Nov 2011
|
22:55 zi
- Revert previous commit
Feature safe: yes
|
18:27 zi
- Update hash to reflect file deployed to the official mirrors. (source code
was diff'd--no code changes detected)
- Not bumping PORTREVISION
Feature safe: yes
|
Friday, 21 Oct 2011
|
13:44 zi
- Update to 2.9.1.2
- Add debugging OPTION to build snort with debug symbols, etc.
- Add sourcefire OPTION to build snort with --enable-sourcefire
- Take maintainership per private email conversation with current maintainer
PR: ports/161876
Submitted by: Ryan Steinmetz <zi@FreeBSD.org>
Approved by: Dean Freeman <wfreeman@sourcefire.com> (maintainer)
|
Friday, 7 Oct 2011
|
13:42 zi
- Update to 2.9.1.1
PR: ports/161347
Submitted by: Ryan Steinmetz <zi@FreeBSD.org>
Approved by: Dean Freeman <wfreeman@sourcefire.com> (maintainer)
|
Thursday, 8 Sep 2011
|
01:36 zi
Update to 2.9.1
Add LICENSE
PR: ports/160044
Submitted by: zi@
Approved by: wxs (mentor), maintainer timeout
|
Wednesday, 13 Apr 2011
|
15:42 dhn
- Forget to add SNORTSAM patchset to distinfo,
Users fail to build snort when WITH_SNORTSAM is set.
Reported by: sunpoet@
|
Tuesday, 12 Apr 2011
|
04:31 dhn
- Update to 2.9.0.5
PR: ports/156334
Submitted by: Dean Freeman <wfreeman@sourcefire.com> (maintainer)
|
Friday, 11 Feb 2011
|
08:01 sunpoet
- Update to 2.9.0.4
- Update snortsam checksum
- Fix LIBNET_CONFIG issue
- Pet portlint
Changes: http://www.snort.org/downloads/740
PR: ports/154668
Submitted by: Dean Freeman <wfreeman@sourcefire.com> (maintainer)
|
Wednesday, 9 Feb 2011
|
06:50 clsung
- Update to 2.9.0.3 [1]
- pass maintainership to William Freeman <wfreeman_AT_sourcefire dot com>
Note: This attached patch replaces the one in ports/153998.
Also fixes the location of the dynamic libs/rules in ports/153224.
PR: ports/154514 [1], ports/153998 [2]
Submitted by: Michael Scheidell <scheidell_AT_secnap dot net>
|
Wednesday, 28 Jul 2010
|
07:21 clsung
- Update snort to version 2.8.6.1.
- From the release notes:
* Eliminate false positives when using fast_pattern:only and having only
one http content in the pattern matcher.
* Address false positives in FTP preprocessor with string format verification.
Also addressed issue with handling of response codes to data transfer
commands where the response code didn't contain a message.
PR: ports/148878
Submitted by: olli hauer <ohauer_AT_gmx dot de>
|
Sunday, 11 Jul 2010
|
01:31 clsung
- distinfo is not updated with last commit
Failed by: me
|
Thursday, 8 Jul 2010
|
16:17 clsung
- bump PORTREVISION
- Fix build WITH_SNORTSAM knob
- Use an updated patch from www.snortsam.net
PR: ports/148449
Submitted by: lioux
|
Tuesday, 20 Apr 2010
|
09:23 clsung
- fix LIB_DEPENDS about libnet
- snortsam patch for snort has changed
- ref:
http://lists.snortsam.net/pipermail/snortsam-discussion/2010-March/000502.html
- bump PORTREVISION
PR: ports/145632
Submitted by: olli hauer <ohauer_AT_gmx dot de>
|
Tuesday, 23 Mar 2010
|
08:21 clsung
- restore snortsam checksum
PR: ports/144715
Submitted by: olli hauer <ohauer_AT_gmx dot de>
|
Sunday, 7 Mar 2010
|
12:51 clsung
- Update to 2.8.5.3
|
Friday, 22 Jan 2010
|
03:03 clsung
- update snort to version 2.8.5.2
RELEASE.NOTES
2009-12-15 - Snort 2.8.5.2
[*] Improvements
* Improvements to HTTP Inspect for handling of pipelined requests
and chunked encodings.
* Updated the documentation for output plugins and log limits.
* Fixed building on AIX 6.
* Fixed reloading of auto-iface variables when privileges had been dropped.
* Fixed issues at startup and perfstats rotation with old versions of
libc (2.2, 2.3) & linux threads.
PR: ports/142885
Submitted by: olli hauer <ohauer_AT_gmx dot de>
|
Wednesday, 28 Oct 2009
|
05:02 clsung
- Update to 2.8.5.1
|
Friday, 21 Aug 2009
|
01:34 clsung
- Re-enable plugin snortsam
- bump PORTREVISION
PR: ports/137765
Submitted by: Danton Dorati <danton_AT_freebsdbrasil dot com dot br>
|
Thursday, 7 May 2009
|
02:26 clsung
- Update to 2.8.4.1
|
Friday, 26 Sep 2008
|
09:49 clsung
- Update to 2.8.2.2
|
Friday, 22 Aug 2008
|
16:24 clsung
- patch for enable feature to output plugin snortsam
- bump PORTREVISION
PR: ports/126506
Submitted by: Danton Dorati <danton_AT_freebsdbrasil dot com dot br>
|
Monday, 23 Jun 2008
|
02:26 clsung
- Update to 2.8.2.1
- 2008-06-12 - Snort 2.8.2.1
[*] Improvements
* Fix support for pass rules that sometimes did not take precedence
over alert and/or drop rules.
PR: ports/124717
Submitted by: Michael Scheidell <scheidell_AT_secnap dot net>
|
Monday, 9 Jun 2008
|
01:55 clsung
- Update to 2.8.2
|
Wednesday, 9 Apr 2008
|
09:57 clsung
- Update to 2.8.1
|
Tuesday, 8 Apr 2008
|
02:22 clsung
- Update to 2.8.0.2
PR: ports/121103
Submitted by: Jo Rhett <jrhett_AT_netconsonance dot com>
Reviewed by: clsung
|
Tuesday, 14 Aug 2007
|
00:04 clsung
- Update to 2.7.0.1
Tested on two systems, and until works perfectly.
Changelog snort-2.7.0.1:
* etc/snort.conf:
Turn off flow since Stream5 is now enabled by default.
* src/snort.c:
Fix printing of threshold counts until after all rules are read.
This issue did not affect thresholding, only display of thresholding.
Thanks to Jeffrey Denton for reporting the problem.
* src/sfutil/ipobj.c:
Fix free of invalid pointer when using a negated IP list.
This is used by sfportscan preprocessor configuration parsing.
Thanks to Anders Ostrem for reporting the problem.
* src/preprocessors/Stream5/snort_stream5_session.c:
Fixed issue when experimental ICMP tracking is used without using
the TCP or UDP session tracking. ICMP was attempting to lookup
TCP or UDP sessions from uninitialized session cache. Thanks to
Koji Shikata for reporting the problem.
* src/preprocessors/Stream5/snort_stream5_tcp.c:
Fixed invalid session pointer when rule tries to use flowbits after
session ends. Thanks to rmkml for initially reporting the problem.
PR: ports/115294
Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
|
Tuesday, 24 Jul 2007
|
07:05 clsung
- Update to 2.7.0
Update includes:
- Target-based stream reassembly, including handling of TCP dataoverlaps and
anomalous TCP header flags on a per-destination basis. 11 different
target-based policies are supported. See README.stream5 for specific
configuration options for operating system targets.
- UDP session tracking
- Option to emulate Stream4 flushing behaviour
- Stream5 replaces BOTH Stream4 and Flow -- should disable both of these when
Stream5 is enabled.
- Security and memory footprint improvements
PR: ports/114806
Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
|
Monday, 2 Jul 2007
|
02:11 clsung
- Update to 2.6.1.5
PR: ports/114123
Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
|
Wednesday, 18 Apr 2007
|
06:42 clsung
- Update to 2.6.1.4
- Fix initial copy of configuration files.
PR: ports/111533
Submitted by: Robin Gruyters <r dot gruyters_AT_yirdis dot nl>
|
Wednesday, 21 Feb 2007
|
10:38 clsung
- Update to 2.6.1.3
- security update
Security: http://www.snort.org/docs/advisory-2007-02-19.html
|
Tuesday, 19 Dec 2006
|
08:53 clsung
- Update to 2.6.1.2
|
Thursday, 7 Dec 2006
|
08:59 clsung
- Update snort to latest version (2.6.1.1)
PR: ports/106368
Submitted by: Sunpoet Po-Chuan Hsieh <sunpoet_AT_sunpoet dot net>
|
Friday, 22 Sep 2006
|
08:47 clsung
- Update to 2.6.0.2
- let snort to packet sniff several different network interfaces
- Contributed by Matthew Seaman <matthew dot seaman_AT_thebunker dot net>
|
Wednesday, 30 Aug 2006
|
04:26 clsung
- Update to 2.6.0
- I'll maintain it now.
PR: ports/99862
Submitted by: Linh Pham <question+fbsdports_AT_closedsrc dot org>
|
Saturday, 10 Jun 2006
|
11:34 pav
- Update to 2.4.5
PR: ports/98773
Submitted by: Linh Pham <question+fbsdports@closedsrc.org> (maintainer)
|
Wednesday, 19 Apr 2006
|
00:16 garga
- Tarball was rerolled
SourceFire, the maintainers of Snort, have updated the tarball for Snort
2.4.4 to include support for building binaries. The updated tarball has a
different size and checksum and I have verified with the Snort team that the
change is in fact valid.
PR: ports/96017
Submitted by: maintainer
|
Tuesday, 21 Mar 2006
|
16:33 garga
- Update to 2.4.4 [1]
- Chase libprelude version [2]
PR: ports/94275 [1], ports/94412 [2]
Submitted by: maintainer [1] [2]
|
Sunday, 13 Nov 2005
|
20:50 mnag
Add SHA256
PR: 88945
Submitted by: maintainer
|
Tuesday, 18 Oct 2005
|
16:32 sergei
- Update to 2.4.3, which includes a fix for a potential buffer overflow
in the Back Orifice preprocessor.
- Transfer maintainership to the submitter, who seems to be tracking
Snort development much closer than I do, and submitted most of
the Snort update PRs in last couple of years
PR: ports/87628
Submitted by: Linh Pham <question+fbsdports@closedsrc.org>
|
Friday, 7 Oct 2005
|
15:07 sergei
- Update to 2.4.1
- Snort distribution no longer includes rules - download them seperately
(or consider using security/oinkmaster to simplify that process)
- Change default config dir to ${PREFIX}/etc/snort (to avoid cluttering)
- Install database schemas scripts into EXAMPLESDIR
|
Tuesday, 26 Apr 2005
|
13:20 sergei
- Update to 2.3.3
- Update MASTER_SITE path for Prelude patch
PR: ports/80338
Submitted by: Linh Pham <question+fbsdports@closedsrc.org>
|
Monday, 25 Apr 2005
|
11:25 sergei
- Add checksum for Prelude patch to distinfo (forgotten in 2.3.2 upgrade)
PR: ports/79188
Submitted by: Greg Panula <greg.panula@lexisnexis.com>
|
Tuesday, 15 Mar 2005
|
07:36 sergei
- Update to 2.3.2:
- Removed end-of-line parser fix (introduced in 2.3.1) in favor of
completely reworking this at the next parser overhaul.
PR: ports/78846
Submitted by: Linh Pham <question+fbsdports@closedsrc.org>
|
Thursday, 10 Mar 2005
|
16:09 sergei
- Update to 2.3.1
- Update MASTER_SITES
Prompted by: Fafa Diliha Romanova <fteg@london.com>
|
Monday, 7 Feb 2005
|
09:35 sergei
- Upgrade to 2.3.0 [1]
- Add WITH_PRELUDE knob to enable integration with Prelude IDS [2]
PR: ports/76679 [1]
Submitted by: Linh Pham <question+fbsdports@closedsrc.org> [1]
Prompted by: Roberto Bosticardo <roberto.bosticardo@csp.it> [2]
|
Tuesday, 12 Oct 2004
|
07:37 sergei
- Upgrade to 2.2.0 [1]
- Prevent local.rules from being clobbered [2]
- Revive OPTIONS - the time has come... ;)
PR: ports/70332 [1], ports/70814 [2]
Submitted by: Linh Pham <question+freebsdpr@closedsrc.org> [1],
Jez Hancock <jez.hancock@munk.nu> [2]
|
Sunday, 4 Jul 2004
|
22:17 sergei
- Update to 2.1.3 [1]
- Use rcNG startup script [2]
PR: ports/67842 [1], ports/67935 [2]
Submitted by: Linh Pham <question+freebsdpr@closedsrc.org> [1],
Renato Botelho <renato@galle.com.br> [2]
|
Sunday, 11 Apr 2004
|
21:25 sergei
- Update to 2.1.2
PR: ports/65373
Submitted by: Linh Pham <question+freebsdpr@closedsrc.org>
|
Friday, 27 Feb 2004
|
08:15 sergei
- Update to 2.1.1
- Remove patches not needed anymore
PR: ports/63373
Submitted by: Linh Pham <question+freebsdpr@closedsrc.org>
|
Friday, 30 Jan 2004
|
16:03 sergei
SIZE *DOES* MATTER.
|
Friday, 2 Jan 2004
|
22:54 sergei
- Install missing config files: unicode.map and threshold.conf
(snort fails to run without them present in ${PREFIX}/etc)
- Bump PORTREVISION
Noticed by: Kirby Kuehl <kkuehl@cisco.com>
|
Friday, 19 Dec 2003
|
23:20 sergei
- Update to 2.1.0 [1]
- Install some additional documentation [1]
- Fix WITH_MYSQL, WITH_ODBC and WITH_POSTGRES knobs [2]
PR: 60400 [1], 59445 [2]
Submitted by: Nicolas Jombart <ecu@ipv42.net> [1],
Ken Stailey <kstailey@yahoo.com> [2]
|
Friday, 21 Nov 2003
|
16:33 osa
Update to 2.0.5 [1]
Use %%DOCSDIR%% and %%DATADIR%% macros [2]
Submitted by: Linh Pham <question@closedsrc.org> [1], osa [2]
PR: 59510
|
11:39 jeh
Update security/snort from 2.0.2 to 2.0.4
PR: 59148
Submitted by: Linh Pham
|
Sunday, 5 Oct 2003
|
11:52 nork
Update to 2.0.2.
PR: ports/57604
Submitted by: Alex Dupre <sysadmin@alexdupre.com>
|
Monday, 4 Aug 2003
|
01:30 kris
Update to snort 2.0.1
PR: ports/55218
Submitted by: mharo
|
Thursday, 17 Apr 2003
|
21:45 kris
Update to snort 2.0.0. This fixes a security vulnerability:
The Sourcefire Vulnerability Research Team has learned of an integer
overflow in the Snort stream4 preprocessor used by the Sourcefire
Network Sensor product line. The Snort stream4 preprocessor
(spp_stream4) incorrectly calculates segment size parameters during
stream reassembly for certain sequence number ranges which can lead to
an integer overflow that can be expanded to a heap overflow.
PR: 51106
Submitted by: Sergey A. Osokin <osa@FreeBSD.org.ru>
|
Tuesday, 4 Mar 2003
|
07:21 kris
Update to snort-1.9.1. This is an important security update:
A buffer overflow has been found in the snort RPC normalization
routines by ISS X-Force. This can cause snort to execute
arbitrary code embedded within sniffed network packets. This
preprocessor is enabled by default.
|
Sunday, 6 Oct 2002
|
09:48 kris
Update to snort 1.9.0. Tweak the default config files so it can actually
find its installed ruleset [1]. Install config files by default if there is
not already one present, and remove on deinstall if they are unchanged
from the default.
Submitted by: The Anarcat <anarcat@anarcat.dyndns.org> [1] (based on)
PR: ports/33887 [1]
|
Saturday, 24 Aug 2002
|
03:17 kris
Update to snort-1.8.7
Submitted by: Paul Marquis <pmarquis@pobox.com>
PR: ports/40528
|
Saturday, 13 Apr 2002
|
22:17 kris
Upgrade to snort 1.8.6. The previous two versions (1.8.4 and 1.8.5) were
buggy and short-lived; hopefully this one is better.
|
Saturday, 1 Dec 2001
|
09:46 kris
Update to snort 1.8.3, a stability and bugfix release.
|
Number of commits found: 105 (showing only 100 on this page) |