diff --git a/apache2-mod_security2.changes b/apache2-mod_security2.changes index c8025a5..33fce3c 100644 --- a/apache2-mod_security2.changes +++ b/apache2-mod_security2.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Mon Jul 19 09:37:45 UTC 2021 - Danilo Spinella + +- Update to 2.9.4: + * Add microsec timestamp resolution to the formatted log timestamp + * Added missing Geo Countries + * Store temporaries in the request pool for regexes compiled per-request. + * Fix other usage of the global pool for request temporaries in re_operators.c + * Adds a sanity check before use ctl:ruleRemoveTargetById and ctl:ruleRemoveTargetByMsg. + * Fix the order of error_msg validation + * When the input filter finishes, check whether we returned data + * fix: care non-null terminated chunk data + * Fix for apr_global_mutex_create() crashes with mod_security + * Fix inet addr handling on 64 bit big endian systems +- Run spec-cleaner +- Remove if/else for older version of SUSE distribution + ------------------------------------------------------------------- Tue Feb 23 07:49:57 UTC 2021 - pgajdos@suse.com diff --git a/apache2-mod_security2.spec b/apache2-mod_security2.spec index 9edf00e..74aeac3 100644 --- a/apache2-mod_security2.spec +++ b/apache2-mod_security2.spec @@ -20,12 +20,12 @@ %define tarballname modsecurity-%{version} %define usrsharedir %{_datadir}/%{name} Name: apache2-mod_security2 -Version: 2.9.3 +Version: 2.9.4 Release: 0 Summary: Web Application Firewall for apache httpd License: Apache-2.0 Group: Productivity/Networking/Web/Servers -URL: http://www.modsecurity.org/ +URL: https://www.modsecurity.org/ Source: https://www.modsecurity.org/tarball/%{version}/%{tarballname}.tar.gz Source1: https://github.com/SpiderLabs/owasp-modsecurity-crs/tarball/master//SpiderLabs-owasp-modsecurity-crs-2.2.9-5-gebe8790.tar.gz Source2: mod_security2.conf @@ -52,9 +52,6 @@ BuildRequires: pkgconfig Requires: %{apache_mmn} Requires: %{apache_suse_maintenance_mmn} Requires: apache2 -%if 0%{suse_version} == 1110 -BuildRoot: %{_tmppath}/%{name}-%{version}-build -%endif %description ModSecurity is an intrusion detection and prevention @@ -73,13 +70,7 @@ mv -v SpiderLabs* rules %patch3 -p1 %build -# aclocal only works with newer distributions -%if 0%{?suse_version} >= 1310 aclocal -# on older versions only autoconf is called -%else -autoreconf -fi -%endif automake %configure --with-apxs=%{apache_apxs} --enable-request-early --enable-htaccess-config --disable-mlogc CFLAGS="%{optflags}" make %{?_smp_mflags} @@ -114,16 +105,14 @@ mv %{buildroot}/%{usrsharedir}/rules/modsecurity_crs_10_setup.conf.example \ #make test-regression %files -%if %{suse_version} == 1110 -%defattr (-,root,root) -%endif %{apache_libexecdir}/%{modname}.so %config(noreplace) %{apache_sysconfdir}/conf.d/%{modname}.conf %dir %{apache_sysconfdir}/mod_security2.d %{apache_sysconfdir}/mod_security2.d/README-SUSE-mod_security2.txt %{apache_sysconfdir}/mod_security2.d/empty.conf %{usrsharedir} -%doc README.md CHANGES LICENSE NOTICE authors.txt +%license LICENSE +%doc README.md CHANGES NOTICE authors.txt %doc doc/README.txt %doc doc/README-SUSE-mod_security2.txt %doc rules/util/regression-tests diff --git a/modsecurity-2.9.3.tar.gz b/modsecurity-2.9.3.tar.gz deleted file mode 100644 index 7aeccc3..0000000 --- a/modsecurity-2.9.3.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:4192019d169d3f1dd82cc4714db6986df54c6ceb4ee1c8f253de78d1a6b62118 -size 4307670 diff --git a/modsecurity-2.9.4.tar.gz b/modsecurity-2.9.4.tar.gz new file mode 100644 index 0000000..1ada6e0 --- /dev/null +++ b/modsecurity-2.9.4.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:970e1801907d181e94faec74d595868a3b4abeb07b790b0f30aea3a5d0e05929 +size 4319796