Difference Between Revision 43 and internetx:managed:testing / mod_security
| [-] | Changed | mod_security-ix.changes |
|
x 1 2 -------------------------------------------------------------------3 -Wed Jan 11 06:34:21 UTC 2023 - Carsten Schoene <carsten.schoene@internetx.com>4 -5 -- Update to release 2.9.7 6 -7 --------------------------------------------------------------------8 -Thu Mar 17 10:30:16 UTC 2022 - Local OBS User <cs@linux-administrator.com>9 -10 -- Update to release 2.9.511 -12 --------------------------------------------------------------------13 -Mon Aug 23 11:39:54 UTC 2021 - Local OBS User <cs@linux-administrator.com>14 -15 -- Update to release 2.9.4 16 -17 --------------------------------------------------------------------18 -Wed Feb 5 09:52:49 UTC 2020 - Local OBS User <cs@linux-administrator.com>19 -20 -- Update to release 2.9.321 -22 --------------------------------------------------------------------23 -Wed May 16 06:44:59 UTC 2018 - cs@linux-administrator.com24 -25 -- Update to release 2.9.2 26 -27 --------------------------------------------------------------------28 -Thu Apr 9 09:26:32 UTC 2015 - cs@linux-administrator.com29 -30 -- Update to relesae 2.9.031 -- set PERL ENV var to /usr/bin/perl32 -- drop mlogc-disable-force-sslv3.patch (TLSv1 is default now)33 -34 --------------------------------------------------------------------35 Fri Aug 8 17:29:19 UTC 2014 - cs@linux-administrator.com36 37 - Update to release 2.8.038 |
||
| [-] | Changed | mod_security-ix.spec ^ |
|
69 1 2 Summary: Security module for the Apache HTTP Server3 Name: mod_security 4 %if 0%{?centos_version} >= 6 || 0%{?rhel_version} >= 600 || 0%{?sl_version} >= 600 || 0%{?suse_version} >= 1110 || 0%{?sles_version} >= 115 -%define pkgversion 2.9.76 +%define pkgversion 2.8.07 %define oldver 08 %define _aslxml 09 -%define epoch 110 BuildRequires: libxml2-devel11 %else12 %if %{aslxml}13 -%define pkgversion 2.9.714 +%define pkgversion 2.8.015 %define oldver 016 %define _aslxml 117 -%define epoch 118 BuildRequires: asl-libxml2-devel19 %else20 %define pkgversion 2.6.821 %define pkgname modsecurity-apache_22 %define oldver 123 %define _aslxml 024 -%define epoch 025 BuildRequires: libxml2-devel26 %endif27 %endif28 Version: %{pkgversion}29 -Epoch: %{epoch}30 Release: 3531 License: GPLv232 URL: http://www.modsecurity.org/33 34 Source5: modsec-clamscan.pl35 Source6: modsec-clean_var-asl-data-audit36 Patch1: waf-label.patch37 -Patch2: modsecurity-2.9.1_curl-lower_7.34.patch38 +Patch2: mlogc-disable-force-sslv3.patch39 Patch50: CVE-2013-2765.patch40 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)41 %if 0%{?rhel_version} || 0%{?centos_version} || 0%{?sl_version} || 0%{?redhat_version}42 43 BuildRequires: pcre-devel libtool curl-devel 44 BuildRequires: curl45 46 -BuildRequires: autoconf automake47 Requires: libxml2 pcre48 Provides: ix-mod_security = %{version}49 50 51 %prep52 %setup -n %{pkgname}%{version}53 %patch1 -p154 -%patch2 -p055 +%patch256 %if 0%{?oldver} == 157 %patch50 -p158 %endif59 60 %build61 CFLAGS="%{optflags}"62 export CFLAGS63 -export PERL=/usr/bin/perl64 -65 -[ ! -f configure ] && ./autogen.sh66 67 %configure \68 %if 0%{_aslxml} == 169 |
||
| [+] | Deleted | modsecurity-2.9.1_curl-lower_7.34.patch ^ |
| @@ -1,60 +0,0 @@ ---- mlogc/mlogc.c.orig 2016-06-02 09:15:03.283648355 +0200 -+++ mlogc/mlogc.c 2016-06-02 10:59:44.378377602 +0200 -@@ -1270,33 +1270,36 @@ - } - - -- /* Seems like CURL_SSLVERSION_TLSv1_2 is not supported on libcurl -- * < v7.34.0 -- * -- * version_num is a 24 bit number created like this: -- * <8 bits major number> | <8 bits minor number> | <8 bits patch number>. -- */ -- switch (tlsprotocol) { -- case 0: -- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_0); -- break; -- case 1: -- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_1); -- break; -- case 2: -- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); -- break; -- default: -- curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); -- break; -- } - cmaj = curlversion->version_num >> 16; - cmin = (curlversion->version_num & 0x00ff00) >> 8; - cpat = (curlversion->version_num & 0x0000ff); - /* If cURL version < v7.34.0, use TLS v1.x */ - if (cmaj <= 7 && cmin < 34) { - curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1); -- } -+#ifdef CURL_SSLVERSION_TLSv1_0 -+ } else { -+ /* Seems like CURL_SSLVERSION_TLSv1_2 is not supported on libcurl -+ * < v7.34.0 -+ * -+ * version_num is a 24 bit number created like this: -+ * <8 bits major number> | <8 bits minor number> | <8 bits patch number>. -+ */ -+ switch (tlsprotocol) { -+ case 0: -+ curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_0); -+ break; -+ case 1: -+ curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_1); -+ break; -+ case 2: -+ curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); -+ break; -+ default: -+ curl_easy_setopt(curl, CURLOPT_SSLVERSION, CURL_SSLVERSION_TLSv1_2); -+ break; -+ } -+#endif -+ } - - curl_easy_setopt(curl, CURLOPT_CONNECTTIMEOUT, 15); - curl_easy_setopt(curl, CURLOPT_NOSIGNAL, TRUE); | ||
| Deleted | modsecurity-2.9.0.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.2.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.3.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.4.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.5.tar.bz2 ^ | |
| Deleted | modsecurity-2.9.7.tar.bz2 ^ | |