Bug 147099 - [PATCH] www/mod_security: update to 2.5.12
Summary: [PATCH] www/mod_security: update to 2.5.12
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Philip M. Gollucci
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-05-26 23:50 UTC by Philip M. Gollucci
Modified: 2010-06-08 23:02 UTC (History)
1 user (show)

See Also:


Attachments
ap22-mod_security-2.5.12.patch (9.60 KB, patch)
2010-05-26 23:50 UTC, Philip M. Gollucci
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Philip M. Gollucci 2010-05-26 23:50:02 UTC
- Update to 2.5.12
- sort PLIST_FILES and PLIST_DIRS

 Please update ports/www/mod_security to version v2.5.12

_____________________________________________________________


http://www.modsecurity.org/

of version v2.5.12:

http://sourceforge.net/projects/mod-security/files/modsecurity-apache/2.5.12/CHANGES_2.5.12.txt/download

More details from the SVN log:
* r1488 | b1v1r | 2010-02-05 19:38:56 +0100 (Fri, 05 Feb 2010) | 1 line
Cleanup path nomalization routine and add some further regression tests
(MODSEC-123).

* r1487 | b1v1r | 2010-02-05 19:26:43 +0100 (Fri, 05 Feb 2010) | 1 line
Fixed SecUploadFileMode to set the correct mode (MODSEC-129).

* r1486 | b1v1r | 2010-02-05 19:24:44 +0100 (Fri, 05 Feb 2010) | 1 line
Fixed nolog,auditlog/noauditlog/nolog controls for disruptive actions
(MODSEC-78, MODSEC-130)

* r1479 | b1v1r | 2010-02-05 19:15:31 +0100 (Fri, 05 Feb 2010) | 1 line
Added SecUploadFileLimit (MODSEC-116).

* r1478 | b1v1r | 2010-02-05 19:14:08 +0100 (Fri, 05 Feb 2010) | 1 line
Rewrote path normalization routine (MODSEC-123).

* r1476 | b1v1r | 2010-02-05 19:12:53 +0100 (Fri, 05 Feb 2010) | 1 line
Trim whitespace around phrases used with @pmFromFile and allow for
both LF and CRLF terminated lines (MODSEC-126).

* r1474 | b1v1r | 2010-02-05 19:11:36 +0100 (Fri, 05 Feb 2010) | 1 line
Allow for more robust parsing for multipart header folding. Reported
by Sogeti/ESEC R&D (MODSEC-118). Added additional multipart regression
tests.

* r1472 | b1v1r | 2010-02-05 19:09:19 +0100 (Fri, 05 Feb 2010) | 1 line
Added PCRE limits and studying by default to help alleviate REDoS
reported by Sogeti/ESEC R&D (MODSEC-119).

* r1471 | b1v1r | 2010-02-05 19:07:56 +0100 (Fri, 05 Feb 2010) | 1 line
Fixed memory leak in v1 cookie parser reported by Sogeti/ESEC R&D
(MODSEC-121).

Further references:
http://secunia.com/advisories/38460/
http://freshmeat.net/projects/modsecurity/releases/312017

CVE Request:
http://www.openwall.com/lists/oss-security/2010/02/10/2
Port maintainer (araujo@FreeBSD.org) is cc'd.

Generated with FreeBSD Port Tools 0.99
Comment 1 Edwin Groothuis freebsd_committer freebsd_triage 2010-05-26 23:50:33 UTC
Responsible Changed
From-To: freebsd-ports-bugs->araujo

Over to maintainer (via the GNATS Auto Assign Tool)
Comment 2 Philip M. Gollucci freebsd_committer freebsd_triage 2010-06-08 22:55:58 UTC
Responsible Changed
From-To: araujo->pgollucci

maintainer timeout (araujo; 14 days; implicit traveling)
Comment 3 dfilter service freebsd_committer freebsd_triage 2010-06-08 22:59:09 UTC
pgollucci    2010-06-08 21:58:59 UTC

  FreeBSD ports repository

  Modified files:
    www/mod_security     Makefile distinfo 
  Log:
  - Update to 2.5.12
  - sort PLIST_FILES and PLIST_DIRS
  
  PR:             ports/147099
  Submitted by:   pgollucci@ (myself), several
  Approved by:    maintainer (araujo; implicit)
  With Hat:       apache@
  
  Revision  Changes    Path
  1.41      +51 -44    ports/www/mod_security/Makefile
  1.22      +4 -3      ports/www/mod_security/distinfo
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 4 Philip M. Gollucci freebsd_committer freebsd_triage 2010-06-08 23:02:10 UTC
State Changed
From-To: open->closed

Committed. Thanks!