From 56a39651982f67a743ae2dfbf083f0d5c690f08e Mon Sep 17 00:00:00 2001 From: brenosilva Date: Fri, 8 Jun 2012 15:39:17 +0000 Subject: [PATCH] backport HURD and KfreeBSD build support --- CHANGES | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGES b/CHANGES index c6f136a5..e9239d56 100644 --- a/CHANGES +++ b/CHANGES @@ -72,8 +72,6 @@ ^ Added new rule metadata actions ver, maturity and accuracy. Also included into RULE collection. - * Added build system support for KfreeBSD and HURD. - * Updated Reference manual into doc/ directory. * Fixed Variable DURATION contains the elapsed time in microseconds for compatible reasons with apache and @@ -91,6 +89,8 @@ 08 Jun 2012 - 2.6.6 ------------------- + * Added build system support for KfreeBSD and HURD. + * In 2009, Stefan Esser published an evasion technique that relies on the use of single quotes and PHP. The trick was treating a request parameter as a file. A patch was applied into ModSecurity 2.5.11 by Brian Rectanus. Ivan Ristic reported that the patch was imcomplete. We added extra checks for this evasion.