|
| 1 | +18 Nov 2014 - 2.9.0-RC1 |
| 2 | +----------------------- |
| 3 | + |
| 4 | + * `pmFromFile' and `ipMatchFromFile' operators are now accepting HTTPS served |
| 5 | + files as parameter. |
| 6 | + * `SecRemoteRules' directive - allows you to specify a HTTPS served file that |
| 7 | + may contain rules in the SecRule format to be loaded into your ModSecurity |
| 8 | + instance. |
| 9 | + * `SecRemoteRulesFailAction' directive - allows you to control whenever the |
| 10 | + user wants to Abort or just Warn when there is a problem while downloading |
| 11 | + rules specified with the directive: `SecRemoteRules'. |
| 12 | + * `fuzzyHash' operator - allows to match contents using fuzzy hashes. |
| 13 | + * `FILES_TMP_CONTENT' collection - make available the content of uploaded |
| 14 | + files. |
| 15 | + * InsecureNoCheckCert - option to validate or not a chain of SSL certificates |
| 16 | + on mlogc connections. |
| 17 | + * ModSecurityIIS: ModSecurity event ID was changed from 0 to 0x1. |
| 18 | + [Issue #676 - Kris Kater and ModSecurity team] |
| 19 | + * Fixed signature on "status call": ModSecurity is now using the original |
| 20 | + server signature. |
| 21 | + [Issues #702 - Linas and ModSecurity team] |
| 22 | + * YAJL version is printed while ModSecurity initialization. |
| 23 | + [Issue #703 - Steffen (Apache Lounge) and Mauro Faccenda] |
| 24 | + * Fixed subnet representation using slash notation on the @ipMatch operator. |
| 25 | + [Issue #706 - Walter Hop and ModSecurity team] |
| 26 | + * Limited the length of a status call. |
| 27 | + [Issue #714 - 'cpanelkurt' and ModSecurity team] |
| 28 | + * Added the missing -P option to nginx regression tests. |
| 29 | + [Issue #720 - Paul Yang] |
| 30 | + * Fixed automake scripts to do not use features which will be deprecated in |
| 31 | + the upcoming releases of automake. |
| 32 | + [Issue #760 - ModSecurity team] |
| 33 | + * apr-utils's LDFALGS is now considered while building ModSecurity. |
| 34 | + [Issue #782 - Daniel J. Luke] |
| 35 | + * IIS installer is not considering IIS 6 as compatible anymore. |
| 36 | + [Issue #790 - ModSecurity team] |
| 37 | + * Fixed yajl build script: now looking for the correct header file. |
| 38 | + [Issue #804 - 'rpfilomeno' and ModSecurity team] |
| 39 | + * mlgoc is now forced to use TLS 1.x. |
| 40 | + [Issue #806 - Josh Amishav-Zlatin and ModSecurity team] |
| 41 | + |
| 42 | + |
1 | 43 | 14 Apr 2014 - 2.8.0 |
2 | 44 | ------------------- |
3 | 45 |
|
|
