lp:ubuntu/raring/modsecurity-apache

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

14. By Alberto Gonzalez Iniesta <email address hidden> on 2013-04-06

Applied upstream patch to fix XXE attacks. CVE-2013-1915
Thanks Thomas Goirand for backporting the patch.
(Closes: #704625)
Adds new SecXmlExternalEntity option which by default (Off) disables
the external entity load task executed by libxml2.

13. By Alberto Gonzalez Iniesta <email address hidden> on 2012-10-22

Applied upstream patch to fix multipart/invalid part
ruleset bypass. CVE-2012-4528. (Closes: #691146)

12. By Alberto Gonzalez Iniesta <email address hidden> on 2012-10-01

Fix dangling symlink to /usr/share/doc/mod-security-common.
(Closes: #687866)

11. By Alberto Gonzalez Iniesta <email address hidden> on 2012-07-12

Relicense debian/* files to ASLv2 to avoid conflicts with upstream
license.

10. By Alberto Gonzalez Iniesta <email address hidden> on 2012-07-02

Updated debian/copyright with right license.

9. By Alberto Gonzalez Iniesta <email address hidden> on 2012-06-15

* New upstream release.
* Remove patches/fix_non_linux.patch. Applied upstream.
* debian/rules: cleanup.
* Add hardening flags to build process.

8. By Alberto Gonzalez Iniesta <email address hidden> on 2012-05-03

* mod-security.load: removed /usr/lib/ from libxml2's LoadFile path.
  (Closes: #670247)
* README.Debian: Fix name of example configuration file.
  (Closes: #668938, #659858)
* debian/control: Remove mention to modsecurity-common.
  (Closes: #662862)

7. By Alberto Gonzalez Iniesta <email address hidden> on 2012-03-20

New upstream release

6. By Alberto Gonzalez Iniesta <email address hidden> on 2012-03-16

* New upstream release
* Apply patch by Peter Michael Green to fix FTBFS on non-linux
  kernels. (Closes: #631649, #654719)
* Added doc-base entry
* Set Priority to extra for transitional libapache-mod-security

5. By Alberto Gonzalez Iniesta <email address hidden> on 2011-12-28

* New upstream release
* Include mlogc (still missing manpage). (Closes: #645875)
* postinst: changed force-reload to restart to avoid apache from segfaulting
  when upgrading modsecurity module (Closes: #574376)