07:21 clsung 

- Update snort to version 2.8.6.1.
- From the release notes:
  * Eliminate false positives when using fast_pattern:only and having only
  one http content in the pattern matcher.

  * Address false positives in FTP preprocessor with string format verification.
  Also addressed issue with handling of response codes to data transfer
  commands where the response code didn't contain a message.

PR:             ports/148878
Submitted by:   olli hauer <ohauer_AT_gmx dot de>

13:09 clsung 

- source tar ball go to LOCAL
- fix WITH_SNORTSAM knob

PR:             ports/148484, ports/148516
Submitted by:   Sunpoet Po-Chuan Hsieh <sunpoet_AT_sunpoet dot net>

12:57 clsung 

- Update to 2.8.6
- name for one patch has changed from patch-snort.conf to patch-etc__snort.conf
  (easier to build diffs with 'make makepatch')
- snort.conf was replaced with the version shiped in the rules tarball
  (Maybe users shoud be pointed to the Changelog)

PR:             ports/146155
Submitted by:   olli hauer <ohauer_AT_gmx dot de>

16:17 clsung 

- bump PORTREVISION
- Fix build WITH_SNORTSAM knob
- Use an updated patch from www.snortsam.net

PR:             ports/148449
Submitted by:   lioux

09:23 clsung 

- fix LIB_DEPENDS about libnet
- snortsam patch for snort has changed
  - ref:
http://lists.snortsam.net/pipermail/snortsam-discussion/2010-March/000502.html
- bump PORTREVISION

PR:             ports/145632
Submitted by:   olli hauer <ohauer_AT_gmx dot de>

12:51 clsung 

- Update to 2.8.5.3

03:03 clsung 

- update snort to version 2.8.5.2

RELEASE.NOTES
2009-12-15 - Snort 2.8.5.2

[*] Improvements
* Improvements to HTTP Inspect for handling of pipelined requests
and chunked encodings.

* Updated the documentation for output plugins and log limits.

* Fixed building on AIX 6.

* Fixed reloading of auto-iface variables when privileges had been dropped.

* Fixed issues at startup and perfstats rotation with old versions of
libc (2.2, 2.3) & linux threads.

PR:             ports/142885
Submitted by:   olli hauer <ohauer_AT_gmx dot de>

01:27 clsung 

- fix default flags setting
- bump PORTREVISION

Submitted by:   Andrea Venturoli <ml_AT_netfence dot it>

05:02 clsung 

- Update to 2.8.5.1

02:51 clsung 

- Mark MAKE_JOBS_UNSAFE, as it fails with forced jobs
- bump PORTREVISION

PR:             ports/138644
Submitted by:   Dmitry Marakasov <amdmi3_AT_amdmi3 dot ru>

10:49 miwi 

- Fix fetch

Reported by:    pointyhat
Hat:            portmgr
Feature safe:   yes

21:12 pav 

- Chase libprelude update

Feature safe:   yes

01:34 clsung 

- Re-enable plugin snortsam
- bump PORTREVISION

PR:             ports/137765
Submitted by:   Danton Dorati <danton_AT_freebsdbrasil dot com dot br>

09:27 miwi 

- Fix fetch

19:36 mezz 

-Repocopy devel/libtool15 -> libtool22 and libltdl15 -> libltdl22.
-Update libtool and libltdl to 2.2.6a.
-Remove devel/libtool15 and devel/libltdl15.
-Fix ports build with libtool22/libltdl22.
-Bump ports that depend on libltdl22 due to shared library version change.
-Explain what to do update in the UPDATING.

It has been tested with GNOME2, XFCE4, KDE3, KDE4 and other many wm/desktop
and applications in the runtime.

With help:      marcus and kwm
Pointyhat-exp:  a few times by pav
Tested by:      pgollucci, "Romain Tartière" <romain@blogreen.org>, and
                a few MarcusCom CVS users. Also, I might have missed a few.
Repocopy by:    marcus
Approved by:    portmgr

02:26 clsung 

- Update to 2.8.4.1

10:58 itetcu 

Fix plist with -DNOPORT*.

Prompted by:    QAT QA run
Approved by:    maintainer timeout on QATMail

23:39 amdmi3 

- Chase security/libprelude shlib version bump

PR:             131286, 131585 (partial)
Submitted by:   Vladimir Korkodinov <viper at perm dot raid dot ru>

22:59 amdmi3 

- Add mysql/postgresql to REQUIRE: in rc.script for correct start order

PR:             127954
Submitted by:   Helmut Schneider <jumper99 at gmx dot de>
Approved by:    maintainer timeout

17:59 pav 

- Remove conditional checks for FreeBSD 5.x and older

05:35 clsung 

- bump PORTREVISION
- fix libprelude version
One of the config options for security/snort is WITH_PRELUDE. Last
time libprelude has changed to new version, but Makefile for snort is not
updated. This patch corrects this issue.

PointyHat to:   beech (ports/127339)
PR:             ports/127818
Submitted by:   Krzysztof Stryjek <wtp_AT_bsdguru dot org>

09:49 clsung 

- Update to 2.8.2.2

16:24 clsung 

- patch for enable feature to output plugin snortsam
- bump PORTREVISION

PR:             ports/126506
Submitted by:   Danton Dorati <danton_AT_freebsdbrasil dot com dot br>

06:18 rafan 

Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script.
Specifically, newer autoconf (> 2.13) has different semantic of the
configure target. In short, one should use --build=CONFIGURE_TARGET
instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning
and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:             126524 (obsoletes 52917)
Submitted by:   rafan
Tested on:      two pointyhat 7-amd64 exp runs (by pav)
Approved by:    portmgr (pav)

02:26 clsung 

- Update to 2.8.2.1
- 2008-06-12 - Snort 2.8.2.1

  [*] Improvements
  * Fix support for pass rules that sometimes did not take precedence
  over alert and/or drop rules.

PR:             ports/124717
Submitted by:   Michael Scheidell <scheidell_AT_secnap dot net>

06:16 clsung 

- typo in files/pkg-message.in
- bump PORTREVISION

Submitted by:   kevlo

01:55 clsung 

- Update to 2.8.2

01:50 clsung 

- Snort now includes an updated version of FLEXRESP2 in the main snort source
code and no longer needs to be patched.
- bump PORTREVISION

PR:             ports/124048
Submitted by:   "Scot W. Hetzel" <swhetzel_AT_gmail dot com>

03:50 clsung 

- Update libprelude dependency

PR:             ports/123659
Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>

01:36 clsung 

- add Performance Profiling option
- bump PORTREVISION

PR:             by mail
Submitted by:   Scott MacGregor <shadowbq_AT_gmail dot com>

09:57 clsung 

- Update to 2.8.1

02:22 clsung 

- Update to 2.8.0.2

PR:             ports/121103
Submitted by:   Jo Rhett <jrhett_AT_netconsonance dot com>
Reviewed by:    clsung

01:48 clsung 

- update prelude library dependency

PR:             ports/116111
Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>

00:04 clsung 

- Update to 2.7.0.1

Tested on two systems, and until works perfectly.

Changelog snort-2.7.0.1:
* etc/snort.conf:
  Turn off flow since Stream5 is now enabled by default.
* src/snort.c:
  Fix printing of threshold counts until after all rules are read.
  This issue did not affect thresholding, only display of thresholding.
  Thanks to Jeffrey Denton for reporting the problem.
* src/sfutil/ipobj.c:
  Fix free of invalid pointer when using a negated IP list.
  This is used by sfportscan preprocessor configuration parsing.
  Thanks to Anders Ostrem for reporting the problem.
* src/preprocessors/Stream5/snort_stream5_session.c:
  Fixed issue when experimental ICMP tracking is used without using
  the TCP or UDP session tracking.  ICMP was attempting to lookup
  TCP or UDP sessions from uninitialized session cache.  Thanks to
  Koji Shikata for reporting the problem.
* src/preprocessors/Stream5/snort_stream5_tcp.c:
  Fixed invalid session pointer when rule tries to use flowbits after
  session ends.  Thanks to rmkml for initially reporting the problem.

PR:             ports/115294
Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>

11:41 gabor 

- Remove the DESTDIR modifications from individual ports as we have a new,
  fully chrooted DESTDIR, which does not need such any more.

Sponsored by:   Google Summer of Code 2007
Approved by:    portmgr (pav)

07:05 clsung 

- Update to 2.7.0

Update includes:
- Target-based stream reassembly, including handling of TCP dataoverlaps and
  anomalous TCP header flags on a per-destination basis. 11 different
  target-based policies are supported. See README.stream5 for specific
  configuration options for operating system targets.
- UDP session tracking
- Option to emulate Stream4 flushing behaviour
- Stream5 replaces BOTH Stream4 and Flow -- should disable both of these when
  Stream5 is enabled.
- Security and memory footprint improvements

PR:             ports/114806
Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>

02:11 clsung 

- Update to 2.6.1.5

PR:             ports/114123
Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>

02:51 clsung 

- optional pcap filter in rc.conf.

  Example:
snort_expression="not net after.nat.addr.ess/24"
- bump PORTREVISION

PR:             ports/113551
Submitted by:   Tomoyuki Sakurai <cherry_AT_trombik dot org>

12:50 araujo 

- Update libprelude to 0.9.14.
- Update dependent ports accordingly.
- Bump PORTVERSION to force rebuild.

PR:             ports/112703
Submitted by:   Marcelo Araujo <araujo@FreeBSD.org>
Approved by:    stas (mentor)

06:42 clsung 

- Update to 2.6.1.4
- Fix initial copy of configuration files.

PR:             ports/111533
Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>

03:02 clsung 

- fix build error when configured with FLEXRESP2

PR:             ports/109830
Submitted by:   alfss<alfss_AT_netco dot ru>

10:38 clsung 

- Update to 2.6.1.3
- security update

Security:       http://www.snort.org/docs/advisory-2007-02-19.html

01:57 clsung 

- pet tinderbox

01:36 clsung 

- fix configure errors when WITH_FLEXRESP, WITH_FLEXRESP2
- bump PORTREVISION

14:09 pav 

- Patch net/libnet* to versioned libraries and header files, so they can
  coexist

PR:             ports/103861
Submitted by:   alepulver
Tested by:      pointyhat
With hat:       portmgr

19:05 gabor 

Remove USE_GPG from all effected ports. This knob is a no-op and the way it
was supposed to work is useless, because if we can't trust the distfile from
the remote machine, we can't trust the signature from the same machine either.
Our MD5 and SHA256 are good for checking both the sanity and the
trustiness of distfiles.

Approved by:    portmgr (erwin), erwin (mentor)

04:01 clsung 

- updated prelude version;
- bump PORTREVISION

PR:             ports/107987
Submitted by:   Robin Gruyters <r dot gruyters_AT_yirdis dot nl>

08:53 clsung 

- Update to 2.6.1.2

08:59 clsung 

- Update snort to latest version (2.6.1.1)

PR:             ports/106368
Submitted by:   Sunpoet Po-Chuan Hsieh <sunpoet_AT_sunpoet dot net>

01:16 clsung 

- Update to 0.9.11
- library version update of related ports

Changelog libprelude:
- Hook class comparison function. Accept NULL, equal, not equal operator.
- Introduce better error checking in the idmef-class API, which is now
  considered public and might be used by external application. Rename
  error code to reflect the API.
- Change to the way IDMEF listed element are handled. Specifying negative
  number as the position of the element from the low level API now allow
  to position the element at the specified (reversed) index. Using the
  high level API a negative index permit to address a list of element
  backward (replace an element).
- Build fixes for SWIG > 1.3.27.
- Modify idmef_value_match() so that it always unroll listed value
  (do it for both val1 and val2. Remove assertion, and let
  idmef_value_type_compare() return an error code in case there is an issue.
- Handle path using IDMEF_LIST_APPEND or IDMEF_LIST_PREPEND as
  path using an undefined list index on idmef_path_get() call.
- Make criteria parser accept (*) list index.
- Implement comparison function for all IDMEF object.

PR:             ports/104328
Submitted by:   maintainer (Robin Gruyters)
Approved by:    portmgr (pav)

08:47 clsung 

- Update to 2.6.0.2
- let snort to packet sniff several different network interfaces
  - Contributed by Matthew Seaman <matthew dot seaman_AT_thebunker dot net>

06:15 clsung 

- fix build error in 4.x
  "cvs update - sys/types.h should be before socket.h"

PR:             ports/102922
Submitted by:   Jez Hancock <jez.hancock_AT_munk dot me dot uk>

02:29 clsung 

- fix location entry in snort.conf
- bump PORTREVISION

PR:             ports/102909
Submitted by:   Richard Bejtlich <taosecurity_AT_gmail dot com>

04:26 clsung 

- Update to 2.6.0
- I'll maintain it now.

PR:             ports/99862
Submitted by:   Linh Pham <question+fbsdports_AT_closedsrc dot org>

22:09 sat 

- Release maintainership:

I have jumped in over my head with maintaining the port, both in terms of my
skills with significantly modifying a port (particularly in getting the port
from 2.4.5 to 2.6.0), not using snort enough to really test the full package,
and not enough time to improve the port.

With that said, there still is ports/99862 that is still open (re: bring
security/snort to 2.6.0) which I have it the wall on trying to get the port
to deinstall cleanly due to the optional nature of some components. I will
continue to help out with other ports that I can take on and those that I
can still take on maintainership.

PR:             ports/101526
Submitted by:   Linh Pham <question+fbsdports@closedsrc.org> (maintainer)

11:34 pav 

- Update to 2.4.5

PR:             ports/98773
Submitted by:   Linh Pham <question+fbsdports@closedsrc.org> (maintainer)

04:15 edwin 

Remove USE_REINPLACE from all categories starting with S

11:24 garga 

- Chase libprelude version
- Bump PORTREVISION

PR:             ports/96758, ports/96759, ports/96760
Submitted by:   maintainer

16:33 garga 

- Update to 2.4.4 [1]
- Chase libprelude version [2]

PR:             ports/94275 [1], ports/94412 [2]
Submitted by:   maintainer [1] [2]

12:19 flz 

- Fix dependency on prelude (shlib version has been bumped recently).

PR:             ports/89191
Submitted by:   Krzysztof Stryjek <wtp+snort@bsdguru.org>
Approved by:    maintainer

17:07 sem 

libnet update:
- move 1.0 obsoleted version to net/libnet10
  net/libnet is latest Stable Version
  net/libnet is latest Beta Version

- Fix all depended ports with a new DEPENDS scheme

- While I'm here fix security/yersinia build on 4.x
  (getopt_long and ncurses issues)

PR:             ports/85519 (based on)
Submitted by:   Stas Yakovlev <stas.yakovlev_at_gmail.com>

16:32 sergei 

- Update to 2.4.3, which includes a fix for a potential buffer overflow
  in the Back Orifice preprocessor.
- Transfer maintainership to the submitter, who seems to be tracking
  Snort development much closer than I do, and submitted most of
  the Snort update PRs in last couple of years

PR:             ports/87628
Submitted by:   Linh Pham <question+fbsdports@closedsrc.org>

15:07 sergei 

- Update to 2.4.1
- Snort distribution no longer includes rules - download them seperately
  (or consider using security/oinkmaster to simplify that process)
- Change default config dir to ${PREFIX}/etc/snort (to avoid cluttering)
- Install database schemas scripts into EXAMPLESDIR

13:20 sergei 

- Update to 2.3.3
- Update MASTER_SITE path for Prelude patch

PR:             ports/80338
Submitted by:   Linh Pham <question+fbsdports@closedsrc.org>

03:26 obrien 

At Kris's request, back out the MACHINE_ARCH spelling correction until
after 5.4-RELEASE.

08:04 obrien 

Assist getting more ports working on AMD64 by obeying the
Ports Collection documentation and use 'ARCH' rather than 'MACHINE_ARCH'.

07:36 sergei 

- Update to 2.3.2:
  - Removed end-of-line parser fix (introduced in 2.3.1) in favor of
    completely reworking this at the next parser overhaul.

PR:             ports/78846
Submitted by:   Linh Pham <question+fbsdports@closedsrc.org>

16:09 sergei 

- Update to 2.3.1
- Update MASTER_SITES

Prompted by:    Fafa Diliha Romanova <fteg@london.com>

09:35 sergei 

- Upgrade to 2.3.0 [1]
- Add WITH_PRELUDE knob to enable integration with Prelude IDS [2]

PR:             ports/76679 [1]
Submitted by:   Linh Pham <question+fbsdports@closedsrc.org> [1]
Prompted by:    Roberto Bosticardo <roberto.bosticardo@csp.it> [2]

00:35 girgen 

Split the postgresql ports into a server and a client part.

All ports depending on postgresql shall use the USE_PGSQL=yes knob
defined in Mk/bsd.ports.mk. Bumping portrevisions where needed.

PR:             75344
Approved by:    portmgr@ (kris), ade & sean (mentors)

07:37 sergei 

- Upgrade to 2.2.0 [1]
- Prevent local.rules from being clobbered [2]
- Revive OPTIONS - the time has come... ;)

PR:             ports/70332 [1], ports/70814 [2]
Submitted by:   Linh Pham <question+freebsdpr@closedsrc.org> [1],
                Jez Hancock <jez.hancock@munk.nu> [2]

22:17 sergei 

- Update to 2.1.3 [1]
- Use rcNG startup script [2]

PR:             ports/67842 [1], ports/67935 [2]
Submitted by:   Linh Pham <question+freebsdpr@closedsrc.org> [1],
                Renato Botelho <renato@galle.com.br> [2]

20:59 sergei 

- Rename WITH_POSTGRES knob to WITH_POSTGRESQL to be consistent
  with other ports

PR:             ports/62557 (part)
Submitted by:   Ulrich Spoerlein <q@uni.de>

21:25 sergei 

- Update to 2.1.2

PR:             ports/65373
Submitted by:   Linh Pham <question+freebsdpr@closedsrc.org>

08:15 sergei 

- Update to 2.1.1
- Remove patches not needed anymore

PR:             ports/63373
Submitted by:   Linh Pham <question+freebsdpr@closedsrc.org>

14:38 sergei 

Comment out OPTIONS for now.
Let's wait till the dust settles. ;)

Sometimes it helps when you read freebsd-ports *before* committing...

14:26 sergei 

Oops - marcus did add OPTIONS already <blush>
I still prefer to have near the top of the Makefile -
right after the dependencies section

13:46 sergei 

Use OPTIONS infrastructure from bsd.port.mk

09:14 marcus 

Here come the patches!

* Add ghostscript knobs [1]
* Add per-port persistent build options with a menu-driven front-end [2]
* Allow porters to override the message generated when do-configure fails [3]
* Add patch to obviate many pkg-plist files [4]
* Fix the PKG_DBDIR comment [5]
* Make ports framework more robust with regard to make index [6]
* Add new command macros to bsd.port.mk [7]
* Remove direct command use from bsd.port.mk [8]
* Make the ports system respect WITHOUT_CPU_CFLAGS [9]
* Break the SDL code out into bsd.sdl.mk [10]
* Add working support for USE_SIZE [11]
* Fix RANDOMIZE_MASTER_SITES on -CURRENT [12]
* Convert some spaces to tabs [13]
* Add new physcial categories accessibility and x11-themes [14]
* Speed up GNU configure scripts [15]
* Remove "//" from MLINKS items in PLISTs and fix make -s install and
  make -s deinstall [16]
* Be more specific about looking for files in distinfo [17]
* Add new run-autotools target, and resort configure targets [18]
* Make CONFLICTS compare prefix for installed packages and PREFIX [19]
* Change directory to ${.CURDIR} before running certain make commands [20]
* When INSTALL_AS_USER is set, run ldconfig with failures ignored [21]
* Speed up the security check phase [22]
* Fix some corner cases in the PORTDOCS code [23]
* Add a new DEPRECATED macro [24]
* Make INDEX breakage more informative [25]

Look for a full write-up to follow on ports@ and ports-developers@.

PR:             36112 [1]
                59909 [4]
                61351 [6]
                59058 [7]
                59058 [8]
                59493 [9]
                55494 [10]
                59058 [11]
                59315 [12]
                59058 [13]
                59811 [15]
                59058 [16]
                59058 [17]
                60882 [18]
                58149 [19]
                59058 [20]
                61133 [21]
                55331 [22]
                59070 [23]
                59362 [24]
                59626 [25]
Submitted by:   linimon [1]
                eivind [2]
                marcus [3]
                trevor [4]
                gerald [5]
                linimon [6]
                eik [7]
                eik [8]
                jeh [9]
                edwin [10]
                eik [11]
                Sergey Matveychuk <sem@ciam.ru> [12]
                eik [13]
                trevor gnome [14]
                adamw [15]
                eik [16]
                eik [17]
                edwin [18]
                clement [19]
                eik [20]
                edwin lev [21]
                Eugene M. Kim <ab@astralblue.com> [22]
                eik [23]
                linimon [24]
                eik [25]

22:54 sergei 

- Install missing config files: unicode.map and threshold.conf
  (snort fails to run without them present in ${PREFIX}/etc)
- Bump PORTREVISION

Noticed by:     Kirby Kuehl <kkuehl@cisco.com>

11:30 sergei 

- Add missing dependency on devel/pcre (mandatory)
- Bump PORTREVISION

PR:             60520
Submitted by:   Kenneth Ingham <freebsdpr@i-pi.com>

While I'm here:
- Fix configure's search for libnet (needed for WITH_FLEXRESP)
  when LOCALBASE != /usr/local
- Add CONFIGURE_TARGET to silence warning
- Use DOCSDIR in pkg-plist and re-sort
- Take maintainership (until someone else step up)

23:20 sergei 

- Update to 2.1.0 [1]
- Install some additional documentation [1]
- Fix WITH_MYSQL, WITH_ODBC and WITH_POSTGRES knobs [2]

PR:             60400 [1], 59445 [2]
Submitted by:   Nicolas Jombart <ecu@ipv42.net> [1],
                Ken Stailey <kstailey@yahoo.com> [2]

16:33 osa 

Update to 2.0.5 [1]
Use %%DOCSDIR%% and %%DATADIR%% macros [2]

Submitted by:   Linh Pham <question@closedsrc.org> [1], osa [2]
PR:             59510

11:39 jeh 

Update security/snort from 2.0.2 to 2.0.4

PR:             59148
Submitted by:   Linh Pham

11:52 nork 

Update to 2.0.2.

PR:             ports/57604
Submitted by:   Alex Dupre <sysadmin@alexdupre.com>

03:46 kris 

Drop maintainership.

13:48 edwin 

irc.d script for security/snort

        This is a sample script for ${PREFIX}/etc/rc.d that will
        wake snort up on boot, and take it down on shutdown. Nothing
        fancy here.  This is needed, because I'm planning on teaching
        ACID many new things, and ACID expects snort to help itself.
        There is only one thing that requires thinking here: This
        should run only after {MySQL|PostgreSQL} server is up, as
        snort might want to report to the local server.

PR:             ports/49047
Submitted by:   Yonatan@xpert.com <Yonatan@xpert.com>
Approved by:    maintainer timeout

01:30 kris 

Update to snort 2.0.1

PR:             ports/55218
Submitted by:   mharo

02:50 kris 

Fix detection of sparc64.

Obtained from:  OpenBSD

21:45 kris 

Update to snort 2.0.0.  This fixes a security vulnerability:

  The Sourcefire Vulnerability Research Team has learned of an integer
  overflow in the Snort stream4 preprocessor used by the Sourcefire
  Network Sensor product line. The Snort stream4 preprocessor
  (spp_stream4) incorrectly calculates segment size parameters during
  stream reassembly for certain sequence number ranges which can lead to
  an integer overflow that can be expanded to a heap overflow.

PR:     51106
Submitted by:   Sergey A. Osokin <osa@FreeBSD.org.ru>

06:10 ade 

Clear moonlight beckons.
Requiem mors pacem pkg-comment,
And be calm ports tree.

E Nomini Patri, E Fili, E Spiritu Sancti.

07:21 kris 

Update to snort-1.9.1.  This is an important security update:

A buffer overflow has been found in the snort RPC normalization
routines by ISS X-Force. This can cause snort to execute
arbitrary code embedded within sniffed network packets. This
preprocessor is enabled by default.

15:53 seanc 

Chase libpq version bump.

09:48 kris 

Update to snort 1.9.0.  Tweak the default config files so it can actually
find its installed ruleset [1].  Install config files by default if there is
not already one present, and remove on deinstall if they are unchanged
from the default.

Submitted by:   The Anarcat <anarcat@anarcat.dyndns.org> [1] (based on)
PR:             ports/33887 [1]

03:17 kris 

Update to snort-1.8.7

Submitted by:   Paul Marquis <pmarquis@pobox.com>
PR:             ports/40528

22:17 kris 

Upgrade to snort 1.8.6.  The previous two versions (1.8.4 and 1.8.5) were
buggy and short-lived; hopefully this one is better.

09:46 kris 

Update to snort 1.8.3, a stability and bugfix release.    

01:57 kris 

Update to snort 1.8.2, a bugfix/stability release.    

22:23 kris 

Remove a stray line-continuation which was breaking the fetch.    

23:09 kris 

Take maintainership