ModSecurity is an open source, cross platform web application firewall (WAF) developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.
v3.0.9 Latest
Security issue
- Add some member variable inits in Transaction class (possible segfault)
[Issue #2886 - @GNU-Plus-Windows-User, @airween, @mdounin, @martinhsv]
- Fix: possible segfault on reload if duplicate ip+CIDR in ip match list
[Issue #2877, #2890 - @tomsommer, @martinhsv] - Resolve memory leak on reload (bison-generated variable)
[Issue #2876 - @martinhsv] - Support equals sign in XPath expressions
[Issue #2328 - @dennus, @martinhsv] - Encode two special chars in error.log output
[Issue #2854 - @airween, @martinhsv] - Add JIT support for PCRE2
[Issue #2791 - @wfjsw, @airween, @FireBurn, @martinhsv] - Support comments in ipMatchFromFile file via '#' token
[Issue #2554 - @tomsommer, @martinhsv] - Use name package name libmaxminddb with pkg-config
[Issue #2595, #2596 - @frankvanbever, @ffontaine, @arnout] - Fix: FILES_TMP_CONTENT collection key should use part name
[Issue #2831 - @airween] - Use AS_HELP_STRING instead of obsolete AC_HELP_STRING macro
[Issue #2806 - @hughmcmaster] - During configure, do not check for pcre if pcre2 specified
[Issue #2750 - @dvershinin, @martinhsv] - Use pkg-config to find libxml2 first
[Issue #2714 - @hughmcmaster] - Fix two rule-reload memory leak issues
[Issue #2801 - @Abce, @martinhsv] - Correct whitespace handling for Include directive
[Issue #2800 - @877509395, @martinhsv]
