Topic: ModSecurity 2.1.1 released

[Steffen]

ModSecurity 2.1.1 has been released. The Win32 binary is available for immediate download from the Apache Lounge.

Changes since 2.1.0 are:

* Add the PCRE_DOLLAR_ENDONLY option when compiling regular expression
for the @rx operator and variables.

* Really set PCRE_DOTALL option when compiling the regular expression
for the @rx operator as the docs state.

* Fixed potential memory corruption when expanding macros.

* Fixed error when a collection was retrieved from storage in the same second
as creation by setting the rate to zero.

* Fixed ASCIIZ (NUL) parsing for application/x-www-form-urlencoded forms.

* Fixed the faulty REQUEST_FILENAME variable, which used to change
the internal Apache structures by mistake.

* Updates to quiet some compiler warnings.

* Fixed some casting issues for compiling on NetWare.

[erict]

Hi Steffen,

mod_security 2.1.0 with apache 2.2.4 loads ok (though I have a problem with referer - hoping 2.1.1 might solve this).

However with 2.1.1, mod_security won't start. The error is "Cannot load mod_security ... one of the library files needed to run this application cannot be found."

I have vcredist_x86-sp1 runtime installed. OS is Vista.

Any help appreciated, thanks.
EricT.

[Steffen]

Did you the step from the Readme:

- Create .../apache2/modules/mod_security2 and copy mod_security2.so and libxml2.dll to this folder.

Steffen

[erict]

Yes, Steffen, I copied the v2.1.1 mod_security2.so and libxml2.dll to the apache2.2\modules\mod_security2\ folder.

I get the same library file error using both the Apache 2.2.4 binary from Apache and from ApacheLounge.

BTW, the testing is on my old Windows 98 machine, not Vista as I said (I had to downgrade to apache 2.0.55 on my Vista machine until mod_security 2 issues are sorted.) It worked fine with mod_security v2.1.0.

Cheers,
EricT.

[Steffen]

I have no Vista box running, so I cannot try it.

Steffen

[erict]

[erict]

I'll boot my XP machine up, transfer Apache 2.2.4 and mod_security 2.1.1 to that and see if the error still occurs.

Cheers,
EricT.

[erict]

In httpd.conf:
LoadModule unique_id_module modules/mod_unique_id.so
LoadModule security2_module modules/mod_security2/mod_security2.so

On windows 98:
2.1.0 -- ok.
2.1.1 -- one of the library files is missing.

On Windows XP:
2.1.0 -- ok.
2.1.1 -- Cannot load c:/Program Files/Apache Software Foundation/Apache2.2/modules/mod_security2.so into server: The specified module could not be found.

On Vista:
2.1.0 -- ok.
2.1.1 -- not tested.

The only thing I changed was replacing the .so file.

Any help to you?
EricT.

[erict]

My fault. I mistakenly downloaded the 2.1.1 for Apache 2.0.x

Sorry for the inconvenience.

Thanks for a great product.
Eric T.