This website requires JavaScript.
9292575705
add apache2-mod_security2-CVE-2025-54571.patch
slfo-main
slfo-1.2
Petr Gajdos
2025-08-28 11:27:42 +02:00
5f6ed1e7cc
-CVE-2025-54571
Petr Gajdos
2025-08-22 13:04:02 +02:00
4e08ee7571
Accepting request 1300032 from Apache:Modules
factory
Ana Guerrero
2025-08-18 14:08:56 +00:00
c5663755ff
Accepting request 1300030 from home:AndreasStieger:branches:Apache:Modules
Petr Gajdos
2025-08-18 10:01:09 +00:00
f6c08da3d2
Accepting request 1300022 from home:AndreasStieger:branches:Apache:Modules
Petr Gajdos
2025-08-18 09:36:02 +00:00
25e828d174
Accepting request 1298012 from home:AndreasStieger:branches:Apache:Modules
Petr Gajdos
2025-08-18 07:42:46 +00:00
e44551e136
Accepting request 1290193 from Apache:Modules
Ana Guerrero
2025-07-06 15:07:05 +00:00
4333567e8e
Accepting request 1290193 from Apache:Modules
Ana Guerrero
2025-07-06 15:07:05 +00:00
c463458b46
checkin
Petr Gajdos
2025-07-03 11:14:31 +00:00
b6eddc20a1
checkin
Petr Gajdos
2025-07-03 11:14:31 +00:00
6e6f94d3d8
Accepting request 1282334 from Apache:Modules
Ana Guerrero
2025-06-03 15:57:14 +00:00
5a0959c206
Accepting request 1282334 from Apache:Modules
Ana Guerrero
2025-06-03 15:57:14 +00:00
3a561b5cff
apache2-mod_security2 2.9.10 CVE-2025-48866 (boo#1243976) CVE-2025-47947 (boo#1243978)
Petr Gajdos
2025-06-03 13:20:19 +00:00
76013c7004
Accepting request 1282154 from home:AndreasStieger:branches:Apache:Modules
Petr Gajdos
2025-06-03 13:20:19 +00:00
6c5b4c8a62
Accepting request 1265135 from Apache:Modules
Ana Guerrero
2025-03-31 09:39:41 +00:00
cd523e1151
Accepting request 1265135 from Apache:Modules
Ana Guerrero
2025-03-31 09:39:41 +00:00
ee595a5847
- build with pcre2 (test suite disabled temporarily)
Petr Gajdos
2025-03-28 09:59:34 +00:00
004cac6b45
Accepting request 1253263 from home:AndreasStieger:branches:Apache:Modules
Petr Gajdos
2025-03-28 09:59:34 +00:00
86e3cb04e5
Accepting request 1240740 from Apache:Modules
Ana Guerrero
2025-01-28 13:59:43 +00:00
34eb874069
Accepting request 1240740 from Apache:Modules
Ana Guerrero
2025-01-28 13:59:43 +00:00
d41eeb0bce
- fixes CVE-2022-48279 [bsc#1207378], CVE-2023-24021 [bsc#1207379]
Petr Gajdos
2025-01-28 09:25:37 +00:00
fb40e667f9
Accepting request 1240738 from home:pgajdos
Petr Gajdos
2025-01-28 09:25:37 +00:00
d91a19e9f0
Accepting request 1240477 from Apache:Modules
Ana Guerrero
2025-01-27 19:55:30 +00:00
9706907599
Accepting request 1240477 from Apache:Modules
Ana Guerrero
2025-01-27 19:55:30 +00:00
7312016b17
- package cleanup, coordinated with owasp-modsecurity-crs cleanup - version update to 2.9.8 (changed upstream: Trustwave -> OWASP) * Fixed ap_log_perror() usage * Memory leaks + enhanced logging * CI improvement: First check syntax & always display error/audit logs * Fixed assert() usage * Removed useless code * feat: Check if the MP header contains invalid character * Use standard httpd logging format in error log * fix msc_regexec() != PCRE_ERROR_NOMATCH strict check * Move xmlFree() call to the right place * Add collection size in log in case of writing error * Passing address of lock instead of lock in acquire_global_lock() * Invalid pointer access in case rule id == NOT_SET_P * Show error.log after httpd start in CI * chore: add pull request template * chore: add gitignore file * Possible double free * Set 'jit' variable's initial value * Missing null byte + optimization * fix: remove usage of insecure tmpname * docs: update copyright * Enhanced logging [Issue #3107 ] * Check for null pointer dereference (almost) everywhere * Fix possible segfault in collection_unpack * fix: Replace obsolete macros * chore: update bug-report-for-version-2-x.md * feat: Add more steps: install built module and restart the server * Add new flag: --without-lua * Initial release of CI worklow
Petr Gajdos
2025-01-27 09:41:24 +00:00
76aae411f6
Accepting request 1239893 from home:pgajdos
Petr Gajdos
2025-01-27 09:41:24 +00:00
f10c880c82
Accepting request 1178493 from Apache:Modules
Ana Guerrero
2024-06-05 15:39:46 +00:00
1c9d36229d
Accepting request 1178493 from Apache:Modules
Ana Guerrero
2024-06-05 15:39:46 +00:00
d07185cefe
checkin
Petr Gajdos
2024-06-04 12:15:05 +00:00
ebfc3143a2
checkin
Petr Gajdos
2024-06-04 12:15:05 +00:00
4f58a94cd5
Accepting request 1178487 from home:dimstar:Factory
Petr Gajdos
2024-06-04 12:11:39 +00:00
93206ebb6b
Accepting request 1178487 from home:dimstar:Factory
Petr Gajdos
2024-06-04 12:11:39 +00:00
22a2f6eab5
Accepting request 1173611 from Apache:Modules
Ana Guerrero
2024-05-13 15:58:23 +00:00
1fe5246ddb
Accepting request 1173611 from Apache:Modules
Ana Guerrero
2024-05-13 15:58:23 +00:00
deb0e0b6c9
Accepting request 1172451 from home:pgajdos
Petr Gajdos
2024-05-13 09:19:16 +00:00
335d14841e
Accepting request 1172451 from home:pgajdos
Petr Gajdos
2024-05-13 09:19:16 +00:00
768d5ed2e7
Accepting request 1149082 from Apache:Modules
Ana Guerrero
2024-02-22 19:59:10 +00:00
780cbe3d60
Accepting request 1149082 from Apache:Modules
Ana Guerrero
2024-02-22 19:59:10 +00:00
933e8d6dbd
Accepting request 1147828 from home:dimstar:rpm4.20:a
Petr Gajdos
2024-02-22 08:23:14 +00:00
9399a62d91
Accepting request 1147828 from home:dimstar:rpm4.20:a
Petr Gajdos
2024-02-22 08:23:14 +00:00
196d82d91e
Accepting request 1101664 from Apache:Modules
Danilo Spinella
2023-08-01 09:41:33 +00:00
2a11cb654d
Accepting request 1101664 from Apache:Modules
Danilo Spinella
2023-08-01 09:41:33 +00:00
b365d4d203
Accepting request 1099113 from home:dirkmueller:Factory
Danilo Spinella
2023-08-01 09:14:57 +00:00
59a8a1a4af
Accepting request 1099113 from home:dirkmueller:Factory
Danilo Spinella
2023-08-01 09:14:57 +00:00
ca6551fe3a
Accepting request 1098838 from home:dirkmueller:Factory
Danilo Spinella
2023-07-17 08:33:54 +00:00
8f93005dd6
Accepting request 1098838 from home:dirkmueller:Factory
Danilo Spinella
2023-07-17 08:33:54 +00:00
e21ae5f2cf
Accepting request 907289 from Apache:Modules
Dominique Leuenberger
2021-07-20 13:39:41 +00:00
7ec78fcfcc
Accepting request 907289 from Apache:Modules
Dominique Leuenberger
2021-07-20 13:39:41 +00:00
1dd8c36c28
Accepting request 907288 from home:dspinella:branches:Apache:Modules
Danilo Spinella
2021-07-20 09:51:27 +00:00
9354fbfd19
Accepting request 907288 from home:dspinella:branches:Apache:Modules
Danilo Spinella
2021-07-20 09:51:27 +00:00
2bc003e915
Accepting request 907282 from home:dspinella:branches:Apache:Modules
Danilo Spinella
2021-07-20 09:36:03 +00:00
25bbc70abe
Accepting request 907282 from home:dspinella:branches:Apache:Modules
Danilo Spinella
2021-07-20 09:36:03 +00:00
bdf2c9008a
Accepting request 874491 from Apache:Modules
Dominique Leuenberger
2021-02-23 19:21:41 +00:00
b583de4699
Accepting request 874491 from Apache:Modules
Dominique Leuenberger
2021-02-23 19:21:41 +00:00
1f5c2cdf32
- version update to 2.9.3 * Enable optimization for large stream input by default on IIS [Issue #1299 - @victorhora, @zimmerle] * Allow 0 length JSON requests. [Issue #1822 - @allanbomsft, @zimmerle, @victorhora, @marcstern] * Include unanmed JSON values in unnamed ARGS [Issue #1577 , #1576 - @marcstern, @victorhora, @zimmerle] * Fix buffer size for utf8toUnicode transformation [Issue #1208 - @katef, @victorhora] * Fix sanitizing JSON request bodies in native audit log format [p0pr0ck5, @victorhora] * IIS: Update Wix installer to bundle a supported CRS version (3.0) [@victorhora, @zimmerle] * IIS: Update dependencies for Windows build [Issue #1848 - @victorhora, @hsluoyz] * IIS: Set SecStreamInBodyInspection by default on IIS builds (#1299 ) [Issue #1299 - @victorhora] * IIS: Update modsecurity.conf [Issue #788 - @victorhora, @brianclark] * Add sanity check for a couple malloc() and make code more resilient [Issue #979 - @dogbert2, @victorhora, @zimmerl] * Fix NetBSD build by renaming the hmac function to avoid conflicts [Issue #1241 - @victorhora, @joerg, @sevan] * IIS: Windows build, fix duplicate YAJL dir in script [Issue #1612 - @allanbomsft, @victorhora] * IIS: Remove body prebuffering due to no locking in modsecProcessRequest [Issue #1917 - @allanbomsft, @victorhora] * Fix mpm-itk / mod_ruid2 compatibility [Issue #712 - @ju5t , @derhansen, @meatlayer, @victorhora] * Code cosmetics: checks if actionset is not null before use it
Petr Gajdos
2021-02-23 07:55:22 +00:00
027ac63b0c
- version update to 2.9.3 * Enable optimization for large stream input by default on IIS [Issue #1299 - @victorhora, @zimmerle] * Allow 0 length JSON requests. [Issue #1822 - @allanbomsft, @zimmerle, @victorhora, @marcstern] * Include unanmed JSON values in unnamed ARGS [Issue #1577 , #1576 - @marcstern, @victorhora, @zimmerle] * Fix buffer size for utf8toUnicode transformation [Issue #1208 - @katef, @victorhora] * Fix sanitizing JSON request bodies in native audit log format [p0pr0ck5, @victorhora] * IIS: Update Wix installer to bundle a supported CRS version (3.0) [@victorhora, @zimmerle] * IIS: Update dependencies for Windows build [Issue #1848 - @victorhora, @hsluoyz] * IIS: Set SecStreamInBodyInspection by default on IIS builds (#1299 ) [Issue #1299 - @victorhora] * IIS: Update modsecurity.conf [Issue #788 - @victorhora, @brianclark] * Add sanity check for a couple malloc() and make code more resilient [Issue #979 - @dogbert2, @victorhora, @zimmerl] * Fix NetBSD build by renaming the hmac function to avoid conflicts [Issue #1241 - @victorhora, @joerg, @sevan] * IIS: Windows build, fix duplicate YAJL dir in script [Issue #1612 - @allanbomsft, @victorhora] * IIS: Remove body prebuffering due to no locking in modsecProcessRequest [Issue #1917 - @allanbomsft, @victorhora] * Fix mpm-itk / mod_ruid2 compatibility [Issue #712 - @ju5t , @derhansen, @meatlayer, @victorhora] * Code cosmetics: checks if actionset is not null before use it
Petr Gajdos
2021-02-23 07:55:22 +00:00
fa79cf847b
Accepting request 777581 from Apache:Modules
Dominique Leuenberger
2020-02-20 13:57:56 +00:00
45dd12ec64
Accepting request 777581 from Apache:Modules
Dominique Leuenberger
2020-02-20 13:57:56 +00:00
edc44d368e
- removing %apache_test_* macros, do not test module just by loading the module
Petr Gajdos
2020-02-13 07:56:49 +00:00
f7efbacfbe
- removing %apache_test_* macros, do not test module just by loading the module
Petr Gajdos
2020-02-13 07:56:49 +00:00
4374cdecf2
Accepting request 741022 from openSUSE:Factory
Petr Gajdos
2019-10-18 09:16:43 +00:00
63ecdfc309
Accepting request 741022 from openSUSE:Factory
Petr Gajdos
2019-10-18 09:16:43 +00:00
45ffd97882
Accepting request 739567 from home:RBrownSUSE:branches:Apache:Modules
Petr Gajdos
2019-10-17 13:42:44 +00:00
96bd82740e
Accepting request 739567 from home:RBrownSUSE:branches:Apache:Modules
Petr Gajdos
2019-10-17 13:42:44 +00:00
9dd6e62366
Accepting request 561619 from Apache:Modules
Dominique Leuenberger
2018-01-09 13:52:25 +00:00
e7381dc042
Accepting request 561619 from Apache:Modules
Dominique Leuenberger
2018-01-09 13:52:25 +00:00
11811bcb4e
Accepting request 560465 from home:jengelh:branches:Apache:Modules
Kristyna Streitova
2018-01-04 12:36:56 +00:00
1818d3cb9c
Accepting request 560465 from home:jengelh:branches:Apache:Modules
Kristyna Streitova
2018-01-04 12:36:56 +00:00
0cf4ea6d08
- fix build for SLE_11_SP4: BuildRoot and %deffattr have to be present
Petr Gajdos
2017-12-20 09:21:12 +00:00
bb2b524bac
- fix build for SLE_11_SP4: BuildRoot and %deffattr have to be present
Petr Gajdos
2017-12-20 09:21:12 +00:00
8a706f0f57
Accepting request 556963 from home:kstreitova:branches:Apache:Modules
Kristyna Streitova
2017-12-18 09:36:29 +00:00
831ca78d58
Accepting request 556963 from home:kstreitova:branches:Apache:Modules
Kristyna Streitova
2017-12-18 09:36:29 +00:00
805deb3424
Accepting request 505810 from Apache:Modules
Dominique Leuenberger
2017-06-26 13:52:32 +00:00
7b1f1b72a9
Accepting request 505810 from Apache:Modules
Dominique Leuenberger
2017-06-26 13:52:32 +00:00
57568dbaa7
Accepting request 505247 from home:dimstar:Factory
Petr Gajdos
2017-06-23 06:38:29 +00:00
3b5ebd0659
Accepting request 505247 from home:dimstar:Factory
Petr Gajdos
2017-06-23 06:38:29 +00:00
efb9e595f9
Accepting request 482450 from Apache:Modules
Yuchen Lin
2017-03-31 13:08:39 +00:00
bf7cb12c86
Accepting request 482450 from Apache:Modules
Yuchen Lin
2017-03-31 13:08:39 +00:00
70673e6619
Accepting request 482327 from home:kstreitova:branches:Apache:Modules
Kristyna Streitova
2017-03-24 09:57:51 +00:00
d9db3781a2
Accepting request 482327 from home:kstreitova:branches:Apache:Modules
Kristyna Streitova
2017-03-24 09:57:51 +00:00
edc5905530
Accepting request 331626 from home:pgajdos:apache2
Petr Gajdos
2015-09-18 11:51:55 +00:00
46742795ae
Accepting request 331626 from home:pgajdos:apache2
Petr Gajdos
2015-09-18 11:51:55 +00:00
4a7d4333c1
Accepting request 319208 from Apache:Modules
Stephan Kulow
2015-08-05 04:50:58 +00:00
f975f3e4bd
Accepting request 319208 from Apache:Modules
Stephan Kulow
2015-08-05 04:50:58 +00:00
f42c808926
Accepting request 319207 from home:pgajdos:apache2
Petr Gajdos
2015-07-29 07:23:29 +00:00
2afb615729
Accepting request 319207 from home:pgajdos:apache2
Petr Gajdos
2015-07-29 07:23:29 +00:00
404e95423a
Accepting request 319200 from home:pgajdos:apache2
Petr Gajdos
2015-07-29 07:02:10 +00:00
371cfbadae
Accepting request 319200 from home:pgajdos:apache2
Petr Gajdos
2015-07-29 07:02:10 +00:00
ec7a0121c1
Accepting request 317182 from Apache:Modules
Stephan Kulow
2015-07-20 09:21:07 +00:00
ca616dd933
Accepting request 317182 from Apache:Modules
Stephan Kulow
2015-07-20 09:21:07 +00:00
73cc1b8056
Accepting request 317137 from home:pgajdos:apache2
Kristyna Streitova
2015-07-16 17:01:10 +00:00
91a69741d9
Accepting request 317137 from home:pgajdos:apache2
Kristyna Streitova
2015-07-16 17:01:10 +00:00
b358fcf6e0
Accepting request 290126 from Apache:Modules
Dominique Leuenberger
2015-03-11 08:58:49 +00:00
cf63dbf4db
Accepting request 290126 from Apache:Modules
Dominique Leuenberger
2015-03-11 08:58:49 +00:00
b5854b719c
Accepting request 288294 from Apache:Modules
Dominique Leuenberger
2015-03-03 10:14:44 +00:00
5c92382723
Accepting request 288294 from Apache:Modules
Dominique Leuenberger
2015-03-03 10:14:44 +00:00
9215730c17
- Remove useless comment lines/whitespace
Tomáš Chvátal
2015-03-02 14:46:30 +00:00
4cf7588ffc
- Remove useless comment lines/whitespace
Tomáš Chvátal
2015-03-02 14:46:30 +00:00
c648fa3d5c
Accepting request 287448 from home:elvigia:branches:Apache:Modules
Tomáš Chvátal
2015-03-01 11:04:28 +00:00
c5b875dfdc
Accepting request 287448 from home:elvigia:branches:Apache:Modules
Tomáš Chvátal
2015-03-01 11:04:28 +00:00