Change log for libapache-mod-security package in Ubuntu

libapache-mod-security (2.5.11-1ubuntu0.1) lucid-security; urgency=low

  * SECURITY UPDATE: bypass multipart filtering using invalid quoting
    (LP: #1016909)
    - debian/patches/CVE-2012-2751: Fix detection of invalid
      quotes. Thanks to Alberto Gonzalez Iniesta for the backported patch
    - Patch taken from Oneiric package
    - CVE-2012-2751
  * SECURITY UPDATE: disclosure of local files or denial of service by
    resource exhaustion via XML External Entity (XEE) attacks
    (LP: #1169030)
    - debian/patches/CVE-2013-1915.patch: Add an option to allow loading
      external entities (disabled by default). Backported from upstream
      patch
    - d4d80b38aa85eccb26e3c61b04d16e8ca5de76fe
    - CVE-2013-1915
 -- Evan Broder <email address hidden>   Tue, 16 Apr 2013 09:05:37 -0700

Available diffs

• diff from 2.5.12-1~build0.1 to 2.5.11-1ubuntu0.1 (534.1 KiB)

libapache-mod-security (2.5.12-1+squeeze2build0.11.10.1) oneiric-security; urgency=low

  * fake sync from Debian

Available diffs

• diff from 2.5.12-1+squeeze1build0.11.10.1 to 2.5.12-1+squeeze2build0.11.10.1 (2.1 KiB)

libapache-mod-security (2.5.12-1+squeeze1build0.11.04.1) natty-security; urgency=low

  * fake sync from Debian

Available diffs

• diff from 2.5.12-1 (in Ubuntu) to 2.5.12-1+squeeze1build0.11.04.1 (1.4 KiB)

libapache-mod-security (2.5.12-1+squeeze1build0.11.10.1) oneiric-security; urgency=low

  * fake sync from Debian

Available diffs

• diff from 2.5.12-1 (in Ubuntu) to 2.5.12-1+squeeze1build0.11.10.1 (1.5 KiB)

libapache-mod-security (2.5.12-1) unstable; urgency=low

  * New upstream release. Fixes several security issues.
    (Closes: #569658)
  * Moved to dpkg-source 3.0 (quilt).
  * Bumped Standards-Version to 3.8.4.0
 -- Ubuntu Archive Auto-Sync <email address hidden>   Sun,  09 May 2010 13:53:29 +0100

Available diffs

• diff from 2.5.11-1 to 2.5.12-1 (533.2 KiB)

libapache-mod-security (2.5.11-1) unstable; urgency=low

  * New upstream release
  * Changed section to httpd (from web)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  25 Nov 2009 12:40:18 +0000

Available diffs

• diff from 2.5.10-1 to 2.5.11-1 (188.6 KiB)

libapache-mod-security (2.5.10-1) unstable; urgency=low

  * New upstream version.
  * debian/control: remove mod-security-common dependency on
    libapache-mod-security. (Closes: #529064)
  * liblua correctly detected on build now. (Closes: #524913)

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  05 Nov 2009 06:03:49 +0000

Available diffs

• diff from 2.5.9-1 to 2.5.10-1 (317.1 KiB)

libapache-mod-security (2.5.9-1) unstable; urgency=high

  * New upstream release. (Closes: #512472)
    Urgency high due to it fixing multiple remote DoS.
    Bugtraq ID: 34096
  * Moved to debhelper compatibility level 7:
    - echo 7 > debian/compat
    - Added ${misc:Depends} to debian/control
    - Bumped debhelper version dependency in debian/control
  * Fixed long description formatting. (Closes: #516540)
  * Prepared build of mlogc, not releasing this time due to
    urgency of release and missing man page.

 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  29 Apr 2009 00:16:34 +0100

Available diffs

• diff from 2.5.6-1 to 2.5.9-1 (839.1 KiB)

libapache-mod-security (2.5.6-1) unstable; urgency=low

  * The 'Back to the archive!' Release (Closes: #487431)
  * Drop '2' from package name, now libapache-mod-security
  * New upstream release
    - Includes a new licensing exception that allows binary 
      distribution with licenses not compatible with GPLv2,
      such as Apache's. See MODSECURITY_LICENSING_EXCEPTION
  * Removed debian/bug and debian/rules entry to install bug
    handling when out of the archive.
  * Bumped Standards-Version to 3.8.0.0

Available diffs

• diff from 1.8.7-1ubuntu1 to 2.5.6-1 (1.0 MiB)

libapache-mod-security (1.8.7-1ubuntu1) breezy; urgency=low


  * Resynchronise with Debian, resolving merge conflicts.

 -- Adam Conrad <adconrad@0c3.net>  Wed, 20 Apr 2005 04:37:08 +0000

libapache-mod-security (1.8.4-1.1ubuntu1) hoary; urgency=low


  * Fix up pcre usage to reflect what apache2 actually exports
  * Rip out apache 1.3 packaging

 -- Thom May <email address hidden>  Mon, 28 Feb 2005 21:12:35 +0000

libapache-mod-security (1.7.1-1) unstable; urgency=low


  * New upstream version
  * Fix example http.conf path references in README.Debian (Closes: #216464)
  * Fix upstream url in copyright file
  * Also install new util directory with snort2modsec scripts
  * Added doc-base support for pdf documentation
  * Updated to use modules-config for apache 1.x instead of deprecated apacheconfig
  * Added http.example from CVS as upstream forgot to update it in tarball and
    there was some failing new tests 

 -- Bruno Rodrigues <email address hidden>  Wed, 22 Oct 2003 14:29:09 +0100