Fabrice Fontaine
42e34cf10f
- Fix CVE-2023-24021: Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer overflows on the Web Application Firewall when executing rules that read the FILES_TMP_CONTENT collection. - host-pkgconf is mandatory and used to find libxml2 since https://github.com/SpiderLabs/ModSecurity/commit/baa38ddbaf55a87afecad7a1e1760c69a2689787 - pcre2 is supported since: https://github.com/SpiderLabs/ModSecurity/commit/8fc0b519b7a6c023259753a21f33bf3649a25b14 https://github.com/SpiderLabs/ModSecurity/blob/v2.9.7/CHANGES Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
14 lines
487 B
Plaintext
14 lines
487 B
Plaintext
config BR2_PACKAGE_MODSECURITY2
|
|
bool "modsecurity2"
|
|
depends on BR2_PACKAGE_APACHE
|
|
select BR2_PACKAGE_LIBXML2
|
|
select BR2_PACKAGE_PCRE2
|
|
help
|
|
ModSecurity is an open source, cross-platform web application
|
|
firewall (WAF) module. Known as the "Swiss Army Knife" of
|
|
WAFs, it enables web application defenders to gain visibility
|
|
into HTTP(S) traffic and provides a power rules language and
|
|
API to implement advanced protections.
|
|
|
|
https://github.com/SpiderLabs/ModSecurity
|