Subject: CVS commit: pkgsrc/security/ap-modsecurity2
From: Adrian Portelli
Date: 2009-03-14 14:45:39
Message id: 20090314134539.13972175D0@cvs.netbsd.org

Log Message:
Update to 2.5.9
 * Fixed PDF XSS issue where a non-GET request for a PDF file would crash the
   Apache httpd process.  Discovered by Steve Grubb at Red Hat.

 * Removed an invalid "Internal error: Issuing "%s" for \ 
unspecified error."
   message that was logged when denying with nolog/noauditlog set and
   causing the request to be audited.

 * Fixed parsing multipart content with a missing part header name which
   would crash Apache.  Discovered by "Internet Security Auditors"
   (isecauditors.com).

 * Added ability to specify the config script directly using --with-apr
   and --with-apu.

 * Updated copyright year to 2009.

 * Added macro expansion for append/prepend action.

 * Fixed race condition in concurrent updates of persistent counters.  Updates
   are now atomic.

 * Cleaned up build, adding an option for verbose configure output and making
   the mlogc build more portable.

Files:
RevisionActionfile
1.13modifypkgsrc/security/ap-modsecurity2/Makefile
1.5modifypkgsrc/security/ap-modsecurity2/PLIST
1.6modifypkgsrc/security/ap-modsecurity2/distinfo
1.6addpkgsrc/security/ap-modsecurity2/patches/patch-aa