This bug was fixed in the package snort - 2.9.2-3ubuntu1 --------------- snort (2.9.2-3ubuntu1) precise; urgency=low * Merge from Debian testing. (LP: #931454) Remaining changes: - debian/rules: use mysql_config to find libraries to fix FTBFS with multiarch libmysqlclient. * Dropped "Fixed typo in snort.8": patched upstream. snort (2.9.2-3) unstable; urgency=low * Restore code from the 2.8.5.2-5 package onwards which was lost when the version of experimental was moved to the archive. - Now /var/lib/snort is created through package configuration, as it should have been - Remove md5sum files when purging (Closes: #657038) * debian/rules: - Enable IPv6 support which was optional in version 2.8 for the Snort binary package. This is not enabled for the database binary packages (snort-pgsql and snort-mysql) as the database schemas do not support IPv6. (Closes: #633064) (LP: #703707) - Include the quilt makefile and add dependencies in -stamp and clean targets * debian/snort.init.d: - Do not abort if the package is not configured to use a database but the db-pending-config semaphore is found. Remove it instead and continue. This can happen if a database-related package was installed, removed and then 'snort' is installed afterwards. (LP: #316878, #639755, #722488, #754230, #798608, #876615, #816634, #891904, #918250) * debian/snort-{mysql,pgsql}.postrm: - Remove the db-pending-config semaphore file when removing the package. This prevents errors with the snort.init.d logic if a database package is left unconfigured and then replaced with the snort (non-database) package. * debian/README-database.Debian: Indicate that database support will be deprecated in 2.9 and document that IPv6 is not supported either * debian/control: - Add Build-Depends on quilt - Add VCS entries - Put the complete maintainer's name in UTF-8 - Change Uploaders, add Andrew Pollock and remove Pascal Hakim - Update Standards Version snort (2.9.2-2) unstable; urgency=low * debian/control: Add net-tools to Depends: of snort, snort-mysql and snort-pgsql since 'ifconfig' is required for the configuration script to work. (Closes: #656445) * debian/snort{,-mysql,-psql}.postinst: Create the checksum directory if it does not exist right at the beginning since it might not be created. (Closes: #656445) snort (2.9.2-1) unstable; urgency=low [ Andrew Pollock ] * New upstream release, upload to unstable - Fixes CVE-2009-3641: DoS while printing specially-crafted IPv6 packet using the -v option (Closes: 553584) - The package no longer build-depends on iptables-dev and the negated list of architectures is no longer used (Closes: 634660) - debian/patches/config: Patch the configuration file to remove include files not currently available (Closes: #619446) - This version is fully supported rule-wise (LP: #872582) * Switch to dpkg-source 3.0 (quilt) format * Port across all changes from Snort 2.8.5.2-5 and later in unstable * debian/snort.postinst: create the directory that the checksum for snort.debian.conf will be created in if it doesn't already exist * debian/rules: tell dh_makeshlibs to not call ldconfig in the preinst/postinst of snort-common-libraries * debian/rules: don't install README.WIN32 into snort-doc [ Javier Fernandez-Sanguino Peña ] * debian/rules: - Set enable-zlib when configuring all packages to force it to be enabled as this is required by the http_inspect preprocessor which is enabled by default (Closes: #631854) - Included (commented) the patch provided by Clint Byrum and included in Ubuntu to prevent snort from FTFS with libmysqlclient-dev which will be multiarch in the future. The patch uses mysql_config to find libraries to fix FTBFS with multiarch libmysqlclient. Not enabled since the version of libmysqlclient in unstable currently does not support the --variable=pkglibdir option * debian/snort{,-inline}.config: Use LC_ALL=C when calling ifconfig to make the postinst work when ifconfig's output is internationalised (Closes: 577033) * debian/control: Fix link in the rules package, point to http://www.snort.org/snort-rules/ (Closes: 646547) * debian/my/snort-stat: Modify so that alerts with Priority but without classification are analysed when parsing syslog information. Also set the class to 'Undefined' instead of leaving it empty. (Closes: 590061) * po-debconf translation updates: - Danish, provided by Joe Dalton (Closes: 638678) - Dutch, provided by Jeroen Schot (Closes: 654239) -- Jean-Louis Dupond