snort: upgrade 2.9.19 -> 2.9.20

Changelog:
==========
* src/dynamic-preprocessors/appid/service_plugins/service_ssl.c :
  Fixed a scenario where SSL traffic was not detected correctly.

* src/dynamic-preprocessors/smtp/snort_smtp.c :
  Fixed a possible memory corruption.

* src/dynamic-preprocessors/imap/imap_util.c
  src/dynamic-preprocessors/pop/pop_util.c
  src/dynamic-preprocessors/smtp/smtp_util.c
  src/preprocessors/spp_httpinspect.c :
  Fixed malformed packet debug engine output.

* src/preprocessors/Stream6/snort_stream_tcp.c :
  Fixed security zones info in intrusion events.

* src/dynamic-preprocessors/appid/fw_appid.c :
  Fixed URL lookup failure.

* src/preprocessors/HttpInspect/server/hi_server.c :
  Fixed a possible memory leak.

* src/dynamic-preprocessors/appid/detector_plugins/detector_dns.c
  src/dynamic-preprocessors/appid/fw_appid.c
  src/dynamic-preprocessors/appid/fw_appid.h
  src/dynamic-preprocessors/appid/detector_plugins/service_plugins/service_api.h :
  Added support for dns root queries and underflow.

* src/dynamic-preprocessors/smtp/snort_smtp.c
  src/Makefile.am
  src/dynamic-examples/Makefile.am
  src/dynamic-plugins/sf_dynamic_plugins.c
  src/dynamic-plugins/sf_dynamic_preprocessor.h
  src/dynamic-preprocessors/Makefile.am
  src/dynamic-preprocessors/smtp/snort_smtp.h
  src/dynamic-preprocessors/smtp/spp_smtp.c
  src/smtp_api.h :
  Added support to get extra data from SMTP and HTTP into IPS event.

* src/dynamic-preprocessors/appid/detector_plugins/detector_imap.c
  src/dynamic-preprocessors/appid/detector_plugins/detector_pop3.c :
  Added support for login success and failure eventing for IMAP and POP3.

* src/dynamic-preprocessors/appid/hi_server.c :
  Added support to handle empty string for SNI/CN/SAN/ORG.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
wangmy
2022-06-14 12:35:07 +08:00
committed by Khem Raj
parent 2dbc8c0c8a
commit df63b8a2d4
@@ -14,7 +14,7 @@ SRC_URI = "https://www.snort.org/downloads/archive/snort/${BP}.tar.gz \
file://disable-run-test-program-while-cross-compiling.patch \
file://configure.in-disable-tirpc-checking-for-fedora.patch \
"
SRC_URI[sha256sum] = "b12fc6db72afb58987a2bf1954b8f45bde02047c235513c7663857b9506369c7"
SRC_URI[sha256sum] = "29400e13f53b1831e0b8b10ec1224a1cbaa6dc1533a5322a20dd80bb84b4981c"
UPSTREAM_CHECK_URI = "https://www.snort.org/downloads"
UPSTREAM_CHECK_REGEX = "snort-(?P<pver>\d+(\.\d+)+)\.tar"