github_mirrors/ModSecurity
3
0
Fork 1
mirror of https://github.com/owasp-modsecurity/ModSecurity.git synced 2026-01-13 06:57:10 +03:00
Code Issues Packages Projects Releases Wiki Activity

Prepare 2.5.x branch for next release.

Browse Source
This commit is contained in:
brectanus
2008-07-31 20:30:03 +00:00
parent 5c06f31001
commit bab6fdba35
3 changed files with 40 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
CHANGES
View File

@@ -1,51 +1,56 @@
31 Jul 2008 - 2.5.7-dev1
------------------------
31 Jul 2008 - 2.5.6 31 Jul 2008 - 2.5.6
------------------- -------------------
* Transformation caching has been deprecated, and is now off by default. We * Transformation caching has been deprecated, and is now off by default. We
now advise against using transformation caching in production. now advise against using transformation caching in production.
* Fixed two separate transformation caching issues that could cause incorrect * Fixed two separate transformation caching issues that could cause incorrect
content inspection in some circumstances. content inspection in some circumstances.
* Fixed an issue with the transformation cache using too much RAM, potentially * Fixed an issue with the transformation cache using too much RAM, potentially
crashing Apache with a large number of cache entries. Two new configuration crashing Apache with a large number of cache entries. Two new configuration
options have been added to allow for a finer control of caching: options have been added to allow for a finer control of caching:
maxitems: Max number of items to cache (default 1024) maxitems: Max number of items to cache (default 1024)
incremental: Whether to cache incrementally (default off) incremental: Whether to cache incrementally (default off)
* Added an experimental regression testing suite. The regression suite may * Added an experimental regression testing suite. The regression suite may
be executed via "make test-regression", however it is strongly advised be executed via "make test-regression", however it is strongly advised
to only be executed on a non-production machine as it will startup the to only be executed on a non-production machine as it will startup the
Apache web server that ModSecurity is compiled against with various Apache web server that ModSecurity is compiled against with various
configurations in which it will run tests. configurations in which it will run tests.
* Added a licensing exception so that ModSecurity can be used in a derivative * Added a licensing exception so that ModSecurity can be used in a derivative
work when that derivative is also under an approved open source license. work when that derivative is also under an approved open source license.
* Updated mlogc to version 1.4.5 which adds a LockFile directive and fixes an * Updated mlogc to version 1.4.5 which adds a LockFile directive and fixes an
issue in which the configuration file may be deleted. issue in which the configuration file may be deleted.
05 Jun 2008 - 2.5.5 05 Jun 2008 - 2.5.5
------------------- -------------------
* Fixed an issue where an alert was not logged in the error log * Fixed an issue where an alert was not logged in the error log
unless "auditlog" was used. unless "auditlog" was used.
* Enable the "auditlog" action by default to help prevent a misconfiguration. * Enable the "auditlog" action by default to help prevent a misconfiguration.
The new default is now: "phase:2,log,auditlog,pass" The new default is now: "phase:2,log,auditlog,pass"
* Improve request body processing error messages. * Improve request body processing error messages.
* Handle lack of a new line after the final boundary in a multipart request. * Handle lack of a new line after the final boundary in a multipart request.
This fixes the reported WordPress Flash file uploader problem. This fixes the reported WordPress Flash file uploader problem.
* Fixed issue with multithreaded servers where concurrent XML processing * Fixed issue with multithreaded servers where concurrent XML processing
could crash the web server (at least under Windows). could crash the web server (at least under Windows).
* Fixed blocking in phase 3. * Fixed blocking in phase 3.
* Force modules "mod_rpaf-2.0.c" and "mod_custom_header.c" to run before * Force modules "mod_rpaf-2.0.c" and "mod_custom_header.c" to run before
ModSecurity so that the correct IP is used. ModSecurity so that the correct IP is used.

6
apache2/modsecurity.h
View File

@@ -74,9 +74,9 @@ extern DSOLOCAL modsec_build_type_rec modsec_build_type[];
#define MODSEC_VERSION_MAJOR "2" #define MODSEC_VERSION_MAJOR "2"
#define MODSEC_VERSION_MINOR "5" #define MODSEC_VERSION_MINOR "5"
#define MODSEC_VERSION_MAINT "6" #define MODSEC_VERSION_MAINT "7"
#define MODSEC_VERSION_TYPE "" #define MODSEC_VERSION_TYPE "dev"
#define MODSEC_VERSION_RELEASE "" #define MODSEC_VERSION_RELEASE "1"
#define MODULE_NAME "ModSecurity for Apache" #define MODULE_NAME "ModSecurity for Apache"

2
doc/modsecurity2-apache-reference.xml
View File

@@ -4,7 +4,7 @@
Manual</title> Manual</title>
<articleinfo> <articleinfo>
<releaseinfo>Version 2.5.6 (July 31, 2008)</releaseinfo> <releaseinfo>Version 2.5.7-dev1 (July 31, 2008)</releaseinfo>
<copyright> <copyright>
<year>2004-2008</year> <year>2004-2008</year>