Difference Between Revision 40 and internetx:managed:testing / mod_security
| [-] | Changed | mod_security-ix.changes |
|
x 1 2 -------------------------------------------------------------------3 -Wed Jan 11 06:34:21 UTC 2023 - Carsten Schoene <carsten.schoene@internetx.com>4 -5 -- Update to release 2.9.7 6 -7 --------------------------------------------------------------------8 -Thu Mar 17 10:30:16 UTC 2022 - Local OBS User <cs@linux-administrator.com>9 -10 -- Update to release 2.9.511 -12 --------------------------------------------------------------------13 -Mon Aug 23 11:39:54 UTC 2021 - Local OBS User <cs@linux-administrator.com>14 -15 -- Update to release 2.9.4 16 -17 --------------------------------------------------------------------18 -Wed Feb 5 09:52:49 UTC 2020 - Local OBS User <cs@linux-administrator.com>19 -20 -- Update to release 2.9.321 -22 --------------------------------------------------------------------23 -Wed May 16 06:44:59 UTC 2018 - cs@linux-administrator.com24 -25 -- Update to release 2.9.2 26 -27 --------------------------------------------------------------------28 -Thu Apr 9 09:26:32 UTC 2015 - cs@linux-administrator.com29 -30 -- Update to relesae 2.9.031 -- set PERL ENV var to /usr/bin/perl32 -- drop mlogc-disable-force-sslv3.patch (TLSv1 is default now)33 -34 --------------------------------------------------------------------35 -Fri Aug 8 17:29:19 UTC 2014 - cs@linux-administrator.com36 -37 -- Update to release 2.8.038 -39 --------------------------------------------------------------------40 -Sun Jan 5 16:20:52 UTC 2014 - cs@linux-administrator.com41 -42 -- enable --enable-htaccess-config 43 -44 --------------------------------------------------------------------45 -Thu Dec 19 23:23:46 UTC 2013 - cs@linux-administrator.com46 -47 -- Update to release 2.7.7 48 -49 --------------------------------------------------------------------50 -Tue Jul 30 17:01:30 UTC 2013 - cs@linux-administrator.com51 -52 -- Update to release 2.7.5 53 -54 --------------------------------------------------------------------55 Thu Jul 11 19:33:18 UTC 2013 - cs@linux-administrator.com56 57 - build against asl-libxml2 for EL5 based systems58 |
||
| [-] | Changed | mod_security-ix.spec ^ |
|
102 1 2 %define aslxml 13 -%define pkgname modsecurity-4 +5 Summary: Security module for the Apache HTTP Server6 Name: mod_security 7 %if 0%{?centos_version} >= 6 || 0%{?rhel_version} >= 600 || 0%{?sl_version} >= 600 || 0%{?suse_version} >= 1110 || 0%{?sles_version} >= 118 -%define pkgversion 2.9.79 +%define pkgversion 2.7.410 %define oldver 011 %define _aslxml 012 -%define epoch 113 BuildRequires: libxml2-devel14 %else15 %if %{aslxml}16 -%define pkgversion 2.9.717 +%define pkgversion 2.7.418 %define oldver 019 %define _aslxml 120 -%define epoch 121 BuildRequires: asl-libxml2-devel22 %else23 %define pkgversion 2.6.824 -%define pkgname modsecurity-apache_25 %define oldver 126 %define _aslxml 027 -%define epoch 028 BuildRequires: libxml2-devel29 %endif30 %endif31 Version: %{pkgversion}32 -Epoch: %{epoch}33 Release: 3534 License: GPLv235 URL: http://www.modsecurity.org/36 Group: System Environment/Daemons37 -Source: http://www.modsecurity.org/download/%{pkgname}%{version}.tar.bz238 +Source: http://www.modsecurity.org/download/modsecurity-apache_%{version}.tar.bz239 %if 0%{?rhel_version} || 0%{?centos_version} || 0%{?sl_version} || 0%{?redhat_version}40 Source1: 00_mod_security.conf41 Source2: modsecurity_crs_10_config-default.conf42 43 Source5: modsec-clamscan.pl44 Source6: modsec-clean_var-asl-data-audit45 Patch1: waf-label.patch46 -Patch2: modsecurity-2.9.1_curl-lower_7.34.patch47 +Patch2: mlogc-disable-force-sslv3.patch48 Patch50: CVE-2013-2765.patch49 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)50 %if 0%{?rhel_version} || 0%{?centos_version} || 0%{?sl_version} || 0%{?redhat_version}51 Requires: httpd httpd-mmn = %([ -a %{_includedir}/httpd/.mmn ] && cat %{_includedir}/httpd/.mmn || echo missing)52 BuildRequires: httpd-devel pkgconfig lua-devel53 Requires: lua54 -%if 0%{?rhel} >= 7 55 -%define apxs %{_bindir}/apxs56 -%else57 %define apxs %{_sbindir}/apxs58 -%endif59 %define apache_libexecdir %(%{apxs} -q LIBEXECDIR) 60 ##%define apache_sysconfdir %(%{apxs} -q SYSCONFDIR)61 %define apache_sysconfdir /etc/httpd62 63 BuildRequires: pcre-devel libtool curl-devel 64 BuildRequires: curl65 66 -BuildRequires: autoconf automake67 Requires: libxml2 pcre68 Provides: ix-mod_security = %{version}69 70 71 as a powerful umbrella - shielding web applications from attacks.72 73 %prep74 -%setup -n %{pkgname}%{version}75 +%setup -n modsecurity-apache_%{version}76 %patch1 -p177 -%patch2 -p078 +%patch279 %if 0%{?oldver} == 180 %patch50 -p181 %endif82 83 %build84 CFLAGS="%{optflags}"85 export CFLAGS86 -export PERL=/usr/bin/perl87 -88 -[ ! -f configure ] && ./autogen.sh89 90 %configure \91 %if 0%{_aslxml} == 192 93 %endif94 --enable-pcre-match-limit=no \95 --enable-pcre-match-limit-recursion=no \96 - --enable-pcre-study \97 - --enable-htaccess-config98 + --enable-pcre-study99 100 make %{_smp_mflags}101 102 |
||
| [+] | Deleted | modsecurity-2.9.1_curl-lower_7.34.patch ^ |
| @@ -1,60 +0,0 @@ ---- mlogc/mlogc.c.orig 2016-06-02 09:15:03.283648355 +0200 -+++ mlogc/mlogc.c 2016-06-02 10:59:44.378377602 +0200 -@@ -1270,33 +1270,36 @@ - } - - -- /* Seems like CURL_SSLVERSION_TLSv1_2 is not supported on libcurl -- * < v7.34.0 -- * -- * version_num is a 24 bit number created like this: -- * <8 bits major number> | <8 bits minor number> | <8 bits patch number>. -- */ -- switch (tlsprotocol) { -- case 0: -- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_0); -- break; -- case 1: -- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_1); -- break; -- case 2: -- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); -- break; -- default: -- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); -- break; -- } - cmaj = curlversion->version_num >> 16; - cmin = (curlversion->version_num & 0x00ff00) >> 8; - cpat = (curlversion->version_num & 0x0000ff); - /* If cURL version < v7.34.0, use TLS v1.x */ - if (cmaj <= 7 && cmin < 34) { - curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1); -- } -+#ifdef CURL_SSLVERSION_TLSv1_0 -+ } else { -+ /* Seems like CURL_SSLVERSION_TLSv1_2 is not supported on libcurl -+ * < v7.34.0 -+ * -+ * version_num is a 24 bit number created like this: -+ * <8 bits major number> | <8 bits minor number> | <8 bits patch number>. -+ */ -+ switch (tlsprotocol) { -+ case 0: -+ curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_0); -+ break; -+ case 1: -+ curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_1); -+ break; -+ case 2: -+ curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); -+ break; -+ default: -+ curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); -+ break; -+ } -+#endif -+ } - - curl_easy_setopt(curl, CURLOPT_CONNECTTIMEOUT, 15); - curl_easy_setopt(curl, CURLOPT_NOSIGNAL, TRUE); | ||
| [+] | Changed | modsec-clamscan.pl ^ |
| @@ -27,7 +27,7 @@ my ($FILE) = @ARGV; -$cmd = "$CLAMSCAN --stdout --no-summary $FILE"; +$cmd = "$CLAMSCAN --stdout --disable-summary $FILE"; $input = `$cmd`; $input =~ m/^(.+)/; $error_message = $1; | ||
| Deleted | modsecurity-2.8.0.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.0.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.2.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.3.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.4.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.5.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.7.tar.bz2 ^ | |
| Deleted | modsecurity-apache_2.7.5.tar.bz2 ^ | |
| Deleted | modsecurity-apache_2.7.7.tar.bz2 ^ | |