BSD Ports

Vulnerable: version 2.9.14 is affected by 1 known vulnerability. See below.

security/ap-modsecurity2 2.9.14 NetBSD

Intrusion detection and prevention engine for web applications

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
0403017b1e
License
apache-2.0
Categories
www, security
Package size
213.9 KiB, 1009.2 KiB installed

Description

ModSecurity is an open source intrusion detection and prevention engine for web applications (or a web application firewall). Operating as an Apache Web server module or standalone, the purpose of ModSecurity is to increase web application security, protecting web applications from known and unknown attacks.

This version is usable with apache 2.2 and 2.4.

Install

Binary package:

pkgin install ap24-modsecurity

From pkgsrc:

cd /usr/pkgsrc/security/ap-modsecurity2 && make install clean

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

RepositoryVersion
NetBSD 10.1 x86_642.9.14
NetBSD 10.1 aarch642.9.14
SmartOS / illumos x86_642.9.15
macOS 15 arm642.9.15

Dependencies

Run dependencies 8

No port depends on this one.

Known vulnerabilities 1

Commit history 2

DateCommitCreditsLog message
0403017b1e drixter ap-modsecurity2: Update to version 2.9.15
Full list of changes: * fix: t:htmlEntityDecode does not decode all ASCII named HTML entities [PR from private repo - @marcstern, @fzipi, @airween; fixed GHSA-cxqf-vgrr-xxrv] * fix: use secure value for host verification in case of remote rules download [PR from private repo - @amitu314, @airween; fixed GHSA-2vqc-36qp-ccmw] * fix: add guard to check XML parser context pointer before use [PR from private repo - Tobias Klein (www.trapkit.de), @airween; fixed GHSA-jx3r-phvx-2jmj] * fix: t:removeComments behavior in case of adjacent comments [PR from private repo - @HEXER365, @airween; fixed GHSA-qrch-pjfr-9g47] * fix: t:base64DecodeExt does not handle '-' and '_' characters (URL-safe alphabet) [PR from private repo - @fzipi, @airween; fixed GHSA-4j47-8qcr-jf59] …
d9211ce362 drixter ap-modsecurity2: Update to version 2.9.14
Last version changes: 02 Jul 2026 - 2.9.14 -------------------- * chore: fix cppcheck issues with v2.21.0 [Issue #3593 - @airween] * fix: ctl:ruleRemoveTargetByTag not removing XML attribute targets [Issue #3592 - @fzipi] * Remove deprecated REQBODY_PROCESSOR_ERROR and REQBODY_PROCESSOR_ERROR_MSG [Issue #3578 - @hnakamur] * Re-apply lost fix 4f33f5b: collection_unpack value_len underflow regression [Issue #3560 - @g4mm4-VCF] 28 Apr 2026 - 2.9.13 -------------------- * fix: heap buffer overflow in acmp pm [Issue #3545 - @fumfel,@airween] * fix: probably UB (left shift of neg. val) in ip_tree code [Issue #3542 - @fumfel,@airween] * feat(libinjection): add libinjection 4 final to v2 [Issue #3535 - @airween] * fix: cppcheck warnings [Issue #3530 - @airween] …