# ChangeLog for www-apache/mod_security
# Copyright 1999-2010 Gentoo Foundation; Distributed under the GPL v2
# $Header: /var/cvsroot/gentoo-x86/www-apache/mod_security/ChangeLog,v 1.41 2010/03/14 19:22:24 armin76 Exp $

14 Mar 2010; Raúl Porcel <armin76@gentoo.org> mod_security-2.5.12.ebuild:
sparc stable wrt #304147

09 Mar 2010; Joseph Jezak <josejx@gentoo.org> mod_security-2.5.12.ebuild:
Marked ppc stable for bug #304147.

07 Mar 2010; Markus Meier <maekke@gentoo.org> mod_security-2.5.12.ebuild:
amd64 stable, bug #304147

05 Mar 2010; Christian Faulhammer <fauli@gentoo.org>
mod_security-2.5.12.ebuild:
stable x86, security bug 304147

*mod_security-2.5.12 (09 Feb 2010)

09 Feb 2010; Diego E. Pettenò <flameeyes@gentoo.org>
files/2.5.10/99_mod_security.conf, -mod_security-2.5.9.ebuild,
-mod_security-2.5.11-r1.ebuild, +mod_security-2.5.12.ebuild:
Version bump, this version fixes possible security problems. Keep an old
version around though as the HTTP Parameter Pollution code changed
drastically and might break Rails again.

28 Dec 2009; Raúl Porcel <armin76@gentoo.org>
mod_security-2.5.9-r1.ebuild:
sparc stable wrt #293366

08 Dec 2009; nixnut <nixnut@gentoo.org> mod_security-2.5.9-r1.ebuild:
ppc stable #293366

*mod_security-2.5.11-r2 (26 Nov 2009)

26 Nov 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+mod_security-2.5.11-r2.ebuild:
Further improved ebuild, using EAPI 2: depend on the presence of unique_id
Apache module; create a secured data directory instead of using /tmp;
avoid changing the server signature by default (USE=-vanilla).

*mod_security-2.5.11-r1 (21 Nov 2009)

21 Nov 2009; Diego E. Pettenò <flameeyes@gentoo.org>
-mod_security-2.5.10-r1.ebuild, -mod_security-2.5.11.ebuild,
+mod_security-2.5.11-r1.ebuild,
+files/mod_security-2.5.11-disable-http-pollution.patch, metadata.xml:
Sanitising mod_security: add a vanilla USE flag that restores the original
upstream behaviour for the CRS, if disabled (default), then also disable
some pretty braindamaged rules. Add warnings about the original rules if
vanilla USE flag is enabled or if perl USE flag is enabled. Document in
metadata the new vanilla flag as well as the package-local meaning of the
perl USE flag. Remove older versions.

19 Nov 2009; Markus Meier <maekke@gentoo.org>
mod_security-2.5.9-r1.ebuild:
amd64/x86 stable, bug #293366

*mod_security-2.5.11 (16 Nov 2009)

16 Nov 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+mod_security-2.5.11.ebuild:
Version bump. This time disable some draconic/nearly-idiotic rules.

*mod_security-2.5.10-r1 (26 Oct 2009)

26 Oct 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+files/2.5.10/99_mod_security.conf, -mod_security-2.5.10.ebuild,
+mod_security-2.5.10-r1.ebuild:
Revision bump; install the proper ruleset; install a new config file.

02 Oct 2009; Diego E. Pettenò <flameeyes@gentoo.org>
mod_security-2.5.10.ebuild,
+files/mod_security-2.5.10-broken-autotools.patch:
Ooops, fix the missing broken autotools correction.

*mod_security-2.5.10 (01 Oct 2009)

01 Oct 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+mod_security-2.5.10.ebuild, +files/mod_security-2.5.10-as-needed.patch:
Version bump.

27 Jul 2009; Diego E. Pettenò <flameeyes@gentoo.org>
mod_security-2.5.9-r1.ebuild:
Also list rule 950907 in the list of draconian rules.

15 Jul 2009; Diego E. Pettenò <flameeyes@gentoo.org>
mod_security-2.5.9-r1.ebuild:
Install modsec-rules-updater in sbin, since it requires root privileges.

15 Jul 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+files/2.1.2/99_mod_security.conf:
Restore one file deleted by mistake.

14 Jul 2009; Diego E. Pettenò <flameeyes@gentoo.org>
-files/2.1.2/99_mod_security.conf, -mod_security-2.1.2.ebuild,
-mod_security-2.1.6.ebuild, -mod_security-2.5.5.ebuild,
-mod_security-2.5.6.ebuild, -mod_security-2.5.7.ebuild:
Remove older versions.

*mod_security-2.5.9-r1 (14 Jul 2009)

14 Jul 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+mod_security-2.5.9-r1.ebuild, +files/mod_security-2.5.9-as-needed.patch,
files/mod_security-2.5.9-broken-autotools.patch:
Add patch to properly build with --as-needed (thanks to Christian Ruppert
in bug #276272 — this required an extra fix to the autotools); add a
perl USE flag to disable the update script and add the libwww-perl
dependency (thanks again to Christian in bug #275864), and add a notice
about the draconic command injection rule (bug #223815 reported by David
Sommerseth.

14 Jun 2009; Diego E. Pettenò <flameeyes@gentoo.org> metadata.xml:
Add myself as maintainer too since I haven't seen Luca in a while.

02 Jun 2009; Raúl Porcel <armin76@gentoo.org> mod_security-2.5.9.ebuild:
sparc stable wrt #262302

25 May 2009; Brent Baude <ranger@gentoo.org> mod_security-2.5.9.ebuild:
Marking mod_security-2.5.9 ppc for bug 262302

23 May 2009; Markus Meier <maekke@gentoo.org> mod_security-2.5.9.ebuild:
amd64/x86 stable, bug #262302

*mod_security-2.5.9 (22 May 2009)

22 May 2009; Diego E. Pettenò <flameeyes@gentoo.org>
+mod_security-2.5.9.ebuild,
+files/mod_security-2.5.9-broken-autotools.patch:
Update to version 2.5.9; finally respect flags (if apxs allows to..), have
a test function, simplify install.

*mod_security-2.5.7 (01 Jan 2009)

01 Jan 2009; Benedikt Böhm <hollow@gentoo.org>
+mod_security-2.5.7.ebuild:
version bump wrt #234424

*mod_security-2.5.6 (01 Jan 2009)

01 Jan 2009; Benedikt Böhm <hollow@gentoo.org>
-mod_security-2.5.1.ebuild, -mod_security-2.5.4.ebuild,
+mod_security-2.5.6.ebuild:
version bump wrt security #240946

*mod_security-2.5.5 (01 Jul 2008)

01 Jul 2008; Benedikt Böhm <hollow@gentoo.org>
+mod_security-2.5.5.ebuild:
version bump wrt #230139

*mod_security-2.5.4 (01 Jun 2008)

01 Jun 2008; Benedikt Böhm <hollow@gentoo.org>
-mod_security-2.1.4_rc1.ebuild, +mod_security-2.5.4.ebuild:
version bump wrt #221763

25 Apr 2008; Benedikt Böhm <hollow@gentoo.org> mod_security-2.5.1.ebuild:
install rules-updater wrt #219059

*mod_security-2.5.1 (22 Mar 2008)
*mod_security-2.1.6 (22 Mar 2008)

22 Mar 2008; Benedikt Böhm <hollow@gentoo.org>
-files/99_mod_security-2.1.1.conf, +mod_security-2.1.6.ebuild,
+mod_security-2.5.1.ebuild:
version bumps wrt #209632

31 Jan 2008; Benedikt Böhm <hollow@gentoo.org>
files/99_mod_security-2.1.1.conf, files/2.1.2/99_mod_security.conf:
cleanup

29 Jan 2008; Benedikt Böhm <hollow@gentoo.org> mod_security-2.1.2.ebuild,
mod_security-2.1.4_rc1.ebuild:
fix depend.apache usage wrt #208033

25 Nov 2007; Benedikt Böhm <hollow@gentoo.org> mod_security-2.1.2.ebuild:
fix apache-module eclass usage

*mod_security-2.1.4_rc1 (21 Oct 2007)

21 Oct 2007; Benedikt Böhm <hollow@gentoo.org>
-mod_security-2.1.1.ebuild, +mod_security-2.1.4_rc1.ebuild:
version bump

27 Sep 2007; Raúl Porcel <armin76@gentoo.org> mod_security-2.1.2.ebuild:
sparc stable wrt #191973

19 Sep 2007; Lars Weiler <pylon@gentoo.org> mod_security-2.1.2.ebuild:
Stable on ppc; bug #191973.

17 Sep 2007; Chris Gianelloni <wolf31o2@gentoo.org>
mod_security-2.1.2.ebuild:
Stable on amd64 wrt bug #191973.

16 Sep 2007; Christian Faulhammer <opfer@gentoo.org>
mod_security-2.1.2.ebuild:
stable x86, bug 191973

*mod_security-2.1.2 (08 Sep 2007)

08 Sep 2007; Benedikt Böhm <hollow@gentoo.org>
-files/mod_security-2.1.1-request_interception.patch,
+files/2.1.2/99_mod_security.conf, -mod_security-2.1.1-r1.ebuild,
+mod_security-2.1.2.ebuild:
version bump; fixes #180150, #189995, #191381, #181887, #190301

29 Jul 2007; Christian Heim <phreak@gentoo.org>
+files/mod_security-2.1.1-request_interception.patch,
+files/99_mod_security-2.1.1.conf, +metadata.xml,
+mod_security-2.1.1.ebuild, +mod_security-2.1.1-r1.ebuild:
Moving net-www/mod_security to www-apache/mod_security (#81244).

*mod_security-2.1.1-r1 (15 Jun 2007)

15 Jun 2007; Benedikt Böhm <hollow@gentoo.org>
+files/mod_security-2.1.1-request_interception.patch,
-files/99_mod_security.conf, -mod_security-1.8.7.ebuild,
-mod_security-1.9.4.ebuild, +mod_security-2.1.1-r1.ebuild:
remove apache-1 version; fix #180150

11 May 2007; Steve Dibb <beandog@gentoo.org> mod_security-2.1.1.ebuild:
amd64 stable, security bug 169778

08 May 2007; Gustavo Zacarias <gustavoz@gentoo.org>
mod_security-2.1.1.ebuild:
Stable on sparc wrt security #169778

08 May 2007; Raúl Porcel <armin76@gentoo.org> mod_security-2.1.1.ebuild:
x86 stable wrt security bug 169778

08 May 2007; Tobias Scherbaum <dertobi123@gentoo.org>
mod_security-2.1.1.ebuild:
ppc stable, bug #169778

*mod_security-2.1.1 (06 May 2007)

06 May 2007; Christian Heim <phreak@gentoo.org>
+files/99_mod_security-2.1.1.conf, +mod_security-2.1.1.ebuild:
Version bump, thanks to Nick Palmer <nicholas and slackers.net> and Julien
Allanos <dju at gentoo.org> in #151826 for security #169778.

14 Jan 2007; Luca Longinotti <chtekk@gentoo.org>
-files/1.8.6/99_mod_security.conf, files/99_mod_security.conf,
-files/mod_security.conf, mod_security-1.8.7.ebuild,
-mod_security-1.9.1.ebuild, mod_security-1.9.4.ebuild:
Cleanup.

*mod_security-1.9.4 (05 Jun 2006)

05 Jun 2006; Benedikt Böhm <hollow@gentoo.org>
+mod_security-1.9.4.ebuild:
Version bump

05 Jun 2006; Michael Stewart <vericgar@gentoo.org>
-mod_security-1.7.6.ebuild, -mod_security-1.8.6.ebuild,
-mod_security-1.8.7_rc2.ebuild:
Remove old-style ebuilds

02 Jun 2006; Luca Longinotti <chtekk@gentoo.org> metadata.xml:
Update maintainer metadata.

18 Apr 2006; Jason Wever <weeve@gentoo.org> mod_security-1.8.7.ebuild:
Stable on SPARC.

19 Feb 2006; Joshua Kinard <kumba@gentoo.org> mod_security-1.9.1.ebuild:
Added ~mips to KEYWORDS.

*mod_security-1.9.1 (05 Jan 2006)

05 Jan 2006; Luca Longinotti <chtekk@gentoo.org>
+mod_security-1.9.1.ebuild:
Version bump to 1.9.1, fixes bug #115480.

22 Nov 2005; <dang@gentoo.org> mod_security-1.8.7.ebuild:
Marked stable on amd64

01 Nov 2005; Tobias Scherbaum <dertobi123@gentoo.org>
mod_security-1.8.7.ebuild:
Marked ppc stable, bug #106430

18 Sep 2005; Michael Stewart <vericgar@gentoo.org>
mod_security-1.8.7.ebuild:
Stable on x86

20 Jun 2005; Simon Stelling <blubb@gentoo.org> mod_security-1.8.7.ebuild:
added ~amd64 keyword

*mod_security-1.8.7 (06 Mar 2005)

06 Mar 2005; Elfyn McBratney <beu@gentoo.org> +mod_security-1.8.7.ebuild:
Version bump, closes bug #84250.

*mod_security-1.8.7_rc2 (01 Mar 2005)

01 Mar 2005; Elfyn McBratney <beu@gentoo.org> metadata.xml,
+mod_security-1.8.7_rc2.ebuild:
Version bump. Fixes a few segfaults (Apache 2.x only), and a few other bugs.

*mod_security-1.8.6 (09 Jan 2005)

09 Jan 2005; Benedikt Boehm <hollow@gentoo.org> metadata.xml,
+files/1.8.6/99_mod_security.conf, +mod_security-1.8.6.ebuild:
Apache herd package refresh

18 Oct 2004; Jason Wever <weeve@gentoo.org> mod_security-1.7.6.ebuild:
Added ~sparc keyword wrt bug #66615.

04 Sep 2004; Pieter Van den Abeele <pvdabeel@gentoo.org>
mod_security-1.7.6.ebuild:
Masked mod_security-1.7.6.ebuild stable for ppc

05 Aug 2004; Chuck Short <zul@gentoo.org> mod_security-1.7.6.ebuild:
Marked stable for x86.

05 Jun 2004; David Holm <dholm@gentoo.org> mod_security-1.7.6.ebuild:
Added to ~ppc.

*mod_security-1.7.6 (03 Jun 2004)

03 Jun 2004; Chuck Short <zul@gentoo.org> metadata.xml, mod_security-1.7.6.ebuild,
files/99_mod_security.conf, files/mod_security.conf:
Initial version,e build written by dju` <dju @ elegiac.net>.
Closes #32190.