From 8148a807198d7844a1fc8dc73dc915e0f5a040b1 Mon Sep 17 00:00:00 2001 From: Breno Silva Date: Sun, 20 Jan 2013 18:35:13 -0400 Subject: [PATCH] Update CHANGES --- CHANGES | 42 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) diff --git a/CHANGES b/CHANGES index bab7fd20..ccf3f10b 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,45 @@ +21 Jan 2013 - 2.7.2 +------------------- + + * IIS version is now stable. + + * Fixed IIS version does not pass through POST data to ASP.NET when SecRequestBodyAccess + is set to On (MODSEC-372). + + * Fixed IIS version HTTP Request Smuggling protection does not work (MODSEC-344). + + * Fixed IIS version PHP Injection Attack (958976) protection does not work (MODSEC-346). + + * Fixed IIS version Request limit protections are not working (MODSEC-349). + + * Fixed IIS version Outbound protections are not working (MODSEC-350). + + * Added IIS version better installer. + + * NGINX version removed ModSecurityPassCommand (Thanks chaizhenhua). + + * Fixed NGINX version ngx_http_read_client_request_body returned unexpected buffer type (Thanks chaizhenhua). + + * Fixed NGINX version INCS config directories on fedora (Thanks chaizhenhua). + + * Added NGINX version Added drop action for nginx (Thanks chaizhenhua). + + * Fixed bug in cpf_verify operator (Thanks Hideaki Hayashi). + + * Fixed build modsecurity under Arch Linux. + + * Fixed make test crashing when JIT pcre is enabled. + + * Fixed better cookie separator detection code. + + * Fixed mod_security displaying wrong ip address in error.log using apache 2.4 and mod_remoteip. + + * Fixed mod_security was not compiling when use apr without ipv6 support. + + * Fixed mod_security was not compiling when use lua 5.2. + + * Fixed issue when execute make install under Solaris. + 01 Nov 2012 - 2.7.1 -------------------