security/modsecurity3-nginx 1.0.4.20260926_1 FreeBSD

Intrusion detection and prevention engine / nginx Wrapper

System: FreeBSD
Repository: FreeBSD ports
Maintainer: [email protected]
Last update: 2026-10-15
Commit: 5c900a81ed
License: APACHE20
Categories: security, www
Package size: 9.8 KiB, 24.3 KiB installed

Description

The ModSecurity-nginx connector is the connection point between Nginx and libmodsecurity (ModSecurity v3). Said another way, this project provides a communication channel between Nginx and libmodsecurity. This connector is required to use LibModSecurity with Nginx.

The ModSecurity-nginx connector takes the form of an Nginx module. The module simply serves as a layer of communication between Nginx and ModSecurity.

Notice that this project depends on libmodsecurity rather than ModSecurity (version 2.9 or less).

In the other systems

System	Port	Version
FreeBSD	security/modsecurity3-nginx	1.0.4.20260926_1
DragonFly	security/modsecurity3-nginx	1.0.3

System

Port

Version

FreeBSD

security/modsecurity3-nginx

1.0.4.20260926_1

DragonFly

security/modsecurity3-nginx

1.0.3

Install

Binary package:

pkg install modsecurity3-nginx

From the ports tree:

cd /usr/ports/security/modsecurity3-nginx/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	modsecurity3-nginx>0:security/modsecurity3-nginx

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repository	aarch64	amd64	armv6	armv7	i386
FreeBSD:14:latest	1.0.4_9	1.0.4.20260926	-	1.0.3	1.0.4.20260926_1
FreeBSD:14:quarterly	1.0.4_9	1.0.4_10	n/a	1.0.3	1.0.4_10
FreeBSD:15:latest	1.0.4.20260926	1.0.4.20260926_1	n/a	1.0.3	1.0.3
FreeBSD:15:quarterly	1.0.4_9	1.0.4_9	n/a	n/a	n/a
FreeBSD:16:latest	1.0.4_9	1.0.4.20260926_1	n/a	n/a	n/a
FreeBSD:16:quarterly	n/a	n/a	n/a	n/a	n/a

Repository

aarch64

amd64

armv6

armv7

i386

FreeBSD:14:latest

1.0.4_9

1.0.4.20260926

1.0.3

1.0.4.20260926_1

FreeBSD:14:quarterly

1.0.4_9

1.0.4_10

n/a

1.0.3

1.0.4_10

FreeBSD:15:latest

1.0.4.20260926

1.0.4.20260926_1

n/a

1.0.3

FreeBSD:15:quarterly

1.0.4_9

n/a

FreeBSD:16:latest

1.0.4_9

1.0.4.20260926_1

n/a

FreeBSD:16:quarterly

n/a

Dependencies

As this port's Makefile names them.

Library 1

libmodsecurity.so : security/modsecurity3

The full lists below include those, and their dependencies in turn.

Build dependencies 16

Run dependencies 16

No port depends on this one.

Configuration

No options to configure.

USES: compiler:c11
Service scripts: none

Files

distinfo 2

File	Size	SHA256
nginx-1.30.6.tar.gz	1.331698e+06	3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9b8b6c8
owasp-modsecurity-ModSecurity-nginx-b7cf44e_GH0.tar.gz	1.162451e+06	357d608de60b00ca5cb5a86dcd3b8bc398dd0922c3024b8ed8112185ad3e6024

File

Size

SHA256

nginx-1.30.6.tar.gz

1.331698e+06

3cf46f5ed7504d460125866b7bea99fb357f31d887e2e63b35503310e9b8b6c8

owasp-modsecurity-ModSecurity-nginx-b7cf44e_GH0.tar.gz

1.162451e+06

357d608de60b00ca5cb5a86dcd3b8bc398dd0922c3024b8ed8112185ad3e6024

Master sites 1

https://nginx.org/download/

Commit history 5

Date Commit Credits Log message

Date	Commit	Credits	Log message
2026-10-15	`5c900a81ed`	Jochen Neumeister	security/modsecurity3-nginx: Chase the nginx update to 1.30.6 Sponsored by: Netzkommune GmbH
2026-10-14	`5b897f5cb1`	Jochen Neumeister	security/modsecurity3-nginx: Update to 1.0.4.20260926 Pin the connector at the same commit as www/nginx-module-modsecurity3, so that both ways of building this module use the same source. While here: WWW named the SpiderLabs repository, which moved to owasp-modsecurity, and COMMENT said "Instruction detection". Sponsored by: Netzkommune GmbH
2026-09-16	`310be14cfc`	Jochen Neumeister	security/modsecurity3-nginx: Chase the nginx update to 1.30.5 Read the version from www/nginx/version.mk instead of keeping a copy, so the port follows the nginx updates on its own. Sponsored by: Netzkommune GmbH
2026-08-24	`65c481f2f4`	Jochen Neumeister	security/modsecurity3-nginx: Switch to the owasp-modsecurity account The ModSecurity-nginx repository now lives in the owasp-modsecurity organisation; the SpiderLabs path only works through GitHub's redirect. Move the pin from e6a568a to 9eb44fd, the current master, which is what the nginx ports use as well. Sponsored by: Netzkommune GmbH
2026-07-18	`96b7b9b5af`	Jochen Neumeister	www/nginx: Update to 1.30.4 Changes: ) Security: heap buffer overflow when using the map directive with regex matching (CVE-2026-42533) ) Security: uninitialized memory access when using unnamed regex captures with the "slice" directive or background cache update (CVE-2026-60005) *) Security: use-after-free when processing a specially crafted proxied backend response with the ngx_http_ssi_filter_module (CVE-2026-56434) Release Notes: https://nginx.org/en/CHANGES-1.30 Security: 56feeac6-8263-11f1-92ba-bc24110523fe Security: CVE-2026-42533 Security: CVE-2026-56434 Security: CVE-2026-60005 PR: 296830 Sponsored by: Netzkommune GmbH

2026-10-15

5c900a81ed

Jochen Neumeister

security/modsecurity3-nginx: Chase the nginx update to 1.30.6

Sponsored by: Netzkommune GmbH

2026-10-14

5b897f5cb1

Jochen Neumeister

security/modsecurity3-nginx: Update to 1.0.4.20260926

Pin the connector at the same commit as www/nginx-module-modsecurity3, so that both ways of building this module use the same source. While here: WWW named the SpiderLabs repository, which moved to owasp-modsecurity, and COMMENT said "Instruction detection". Sponsored by: Netzkommune GmbH

2026-09-16

310be14cfc

Jochen Neumeister

security/modsecurity3-nginx: Chase the nginx update to 1.30.5

Read the version from www/nginx/version.mk instead of keeping a copy, so the port follows the nginx updates on its own. Sponsored by: Netzkommune GmbH

2026-08-24

65c481f2f4

Jochen Neumeister

security/modsecurity3-nginx: Switch to the owasp-modsecurity account

The ModSecurity-nginx repository now lives in the owasp-modsecurity organisation; the SpiderLabs path only works through GitHub's redirect. Move the pin from e6a568a to 9eb44fd, the current master, which is what the nginx ports use as well. Sponsored by: Netzkommune GmbH

2026-07-18

96b7b9b5af

Jochen Neumeister

www/nginx: Update to 1.30.4

Changes: *) Security: heap buffer overflow when using the map directive with regex matching (CVE-2026-42533) *) Security: uninitialized memory access when using unnamed regex captures with the "slice" directive or background cache update (CVE-2026-60005) *) Security: use-after-free when processing a specially crafted proxied backend response with the ngx_http_ssi_filter_module (CVE-2026-56434) Release Notes: https://nginx.org/en/CHANGES-1.30 Security: 56feeac6-8263-11f1-92ba-bc24110523fe Security: CVE-2026-42533 Security: CVE-2026-56434 Security: CVE-2026-60005 PR: 296830 Sponsored by: Netzkommune GmbH