Source: daq Version: 2.0.7-5.1 Severity: minor Tags: upstream Dear Maintainer,
It looks like upstream daq has changed the 2.0.7 archive. The one Debian used is a 2.0.6. See https://sources.debian.org/src/daq/2.0.7-5.1/configure/#L593 Upstream archive (https://www.snort.org/downloads/snort/daq-2.0.7.tar.gz) is different and has 2.0.7. Problem signaled upstream via snort-devel mailling list: [Snort-devel] daq-2.0.7.tar.gz archive exists in two versions https://lists.snort.org/pipermail/snort-devel/2024-July/000222.html Quoted here to keep technical info: > [...] the daq-2.0.7.tar.gz archive exists in two versions (see hashes at the > end of the email) : > * the "original" (the name I gave): > * seen in Yocto[0], Buildroot[1], fossie.org[2] and Debian[3] > * That archive contains "VERSION='2.0.6'" in the ./configure script > * tar date: 2020-04-08 > * the "new" one: > * Currently at https://www.snort.org/downloads/snort/daq-2.0.7.tar.gz > * Seen in Fedora[4] > * That archive contains "VERSION='2.0.7'" in the ./configure script > * tar date: 2021-03-29 > > Diff of orig -> new shows: > * (C) years changed in comments > * version string changed from 2.0.6 to 2.0.7 > * changes (that look legit) to autostuff > * a file dropped (Visual Studio related) > > [...] > > The hashes (that can be compared with the hashes displayed in the referenced > URLs): > md5sum ea796f001d1b00302e4e69e337ab2460 daq_2.0.7.orig.tar.gz > sha1sum f95ed4c03e546cee53de3c41b251db53411cb682 daq_2.0.7.orig.tar.gz > sha256sum bdc4e5a24d1ea492c39ee213a63c55466a2e8114b6a9abed609927ae13a7705e > daq_2.0.7.orig.tar.gz > sha512sum > 9bedddbc2d952526ab4e1d65f4507eb914507f8b3b5702ecf7137f8a210c690703469162a117a76cb8376a5639db46bd767fc48789ba7294a0bad26d4cd0ede2 > daq_2.0.7.orig.tar.gz > > md5sum 60e5ddcafb985fac7374884d28f299d1 daq-2.0.7.new.tar.gz > sha1sum 01a1131729da9f3bcc901223e2ddb578486b4241 daq-2.0.7.new.tar.gz > sha256sum d1f6709bc5dbddee3fdf170cdc1e49fb926e2031d4869ecf367a8c47efc87279 > daq-2.0.7.new.tar.gz > sha512sum > 37e21766ee659a40e73a11f00af94c1f3f57ab47bdf6b74b8c93c2147e74bab9779a9a7e5cdce31fe772067036f13bc552bc5b23a6e9d76f31aa62f0fdae5643 > daq-2.0.7.new.tar.gz > > [0]: > https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-connectivity/daq/daq_2.0.7.bb > [1]: > https://gitlab.com/buildroot.org/buildroot/-/blob/b2c2c485310c9f5d392cb247eddf4dce35c87e09/package/daq/daq.hash > (patched since) > [2]: https://fossies.org/linux/misc/daq-2.0.7.tar.gz/ > [3]: https://packages.debian.org/source/bookworm/daq > [4]: https://src.fedoraproject.org/rpms/daq/blob/rawhide/f/sources
