pkgsrc/security/ap-modsecurity2
adrianp d8952f2109 Update to 2.5.9
* Fixed PDF XSS issue where a non-GET request for a PDF file would crash the
   Apache httpd process.  Discovered by Steve Grubb at Red Hat.

 * Removed an invalid "Internal error: Issuing "%s" for unspecified error."
   message that was logged when denying with nolog/noauditlog set and
   causing the request to be audited.

 * Fixed parsing multipart content with a missing part header name which
   would crash Apache.  Discovered by "Internet Security Auditors"
   (isecauditors.com).

 * Added ability to specify the config script directly using --with-apr
   and --with-apu.

 * Updated copyright year to 2009.

 * Added macro expansion for append/prepend action.

 * Fixed race condition in concurrent updates of persistent counters.  Updates
   are now atomic.

 * Cleaned up build, adding an option for verbose configure output and making
   the mlogc build more portable.
2009-03-14 13:45:38 +00:00
..
patches Update to 2.5.9 2009-03-14 13:45:38 +00:00
DESCR
distinfo Update to 2.5.9 2009-03-14 13:45:38 +00:00
Makefile Update to 2.5.9 2009-03-14 13:45:38 +00:00
MESSAGE Update from 2.1.4->2.5.7 2008-10-12 12:50:17 +00:00
MESSAGE.xml
options.mk Update from 2.1.4->2.5.7 2008-10-12 12:50:17 +00:00
PLIST Update to 2.5.9 2009-03-14 13:45:38 +00:00