42e34cf10f
- Fix CVE-2023-24021: Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer overflows on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection. - host-pkgconf is mandatory and used to find libxml2 sincebaa38ddbaf- pcre2 is supported since:8fc0b519b7https://github.com/SpiderLabs/ModSecurity/blob/v2.9.7/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
14 lines
487 B
Plaintext
14 lines
487 B
Plaintext
config BR2_PACKAGE_MODSECURITY2
|
|
bool "modsecurity2"
|
|
depends on BR2_PACKAGE_APACHE
|
|
select BR2_PACKAGE_LIBXML2
|
|
select BR2_PACKAGE_PCRE2
|
|
help
|
|
ModSecurity is an open source, cross-platform web application
|
|
firewall (WAF) module. Known as the "Swiss Army Knife" of
|
|
WAFs, it enables web application defenders to gain visibility
|
|
into HTTP(S) traffic and provides a power rules language and
|
|
API to implement advanced protections.
|
|
|
|
https://github.com/SpiderLabs/ModSecurity
|