[packages/apache-mod_security] - updated to 2.9.14

[arekm]

commit 90de180650721587073a903bb6d0db2fc0859b94
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Thu Sep 10 23:04:24 2026 +0200

    - updated to 2.9.14

 apache-mod_security.spec  | 51 ++++++++++++++++++++++++++++++++++++++++++-----
 apu-crypto-includes.patch | 14 +++++++++++++
 2 files changed, 60 insertions(+), 5 deletions(-)
---
diff --git a/apache-mod_security.spec b/apache-mod_security.spec
index bd6564e..ab0ee57 100644
--- a/apache-mod_security.spec
+++ b/apache-mod_security.spec
@@ -1,22 +1,45 @@
+#
+# Conditional build:
+%bcond_without	tests		# unit tests
+%bcond_with	regression_tests	# regression tests (start httpd on localhost; unverified on builders)
+
 %define		mod_name	security
 %define		apxs		/usr/sbin/apxs
 Summary:	Apache module: securing web applications
 Summary(pl.UTF-8):	Moduł do apache: ochrona aplikacji WWW
 Name:		apache-mod_%{mod_name}
-Version:	2.9.12
+Version:	2.9.14
 Release:	1
 License:	GPL v2
 Group:		Networking/Daemons/HTTP
 Source0:	https://github.com/owasp-modsecurity/ModSecurity/releases/download/v%{version}/modsecurity-v%{version}.tar.gz
-# Source0-md5:	0a53077bc36e53d7c9e8b617d7e08f9d
+# Source0-md5:	8d9cc060d0056b21f2463dc1e02a940d
 Source1:	%{name}.conf
+Patch0:		apu-crypto-includes.patch
 URL:		http://www.modsecurity.org/
 BuildRequires:	apache-devel
 BuildRequires:	autoconf
+BuildRequires:	automake
+BuildRequires:	curl-devel
+BuildRequires:	libtool
 BuildRequires:	libxml2-devel
-BuildRequires:	pcre-devel
+BuildRequires:	lua54-devel
+BuildRequires:	pcre2-8-devel
 BuildRequires:	pkgconfig
 BuildRequires:	rpmbuild(macros) >= 1.268
+BuildRequires:	ssdeep-devel
+BuildRequires:	yajl-devel
+%if %{with regression_tests}
+BuildRequires:	apache
+BuildRequires:	apache-mod_access_compat
+BuildRequires:	apache-mod_authn_core
+BuildRequires:	apache-mod_authz_core
+BuildRequires:	apache-mod_mpm_worker
+BuildRequires:	apache-mod_proxy
+BuildRequires:	apache-mod_unique_id
+BuildRequires:	apache-mod_version
+BuildRequires:	perl-libwww
+%endif
 Requires:	apache(modules-api) = %apache_modules_api
 Requires:	apache-mod_unique_id
 Suggests:	apache-mod_headers
@@ -40,21 +63,39 @@ parasol chroniący aplikacje WWW przed atakami.
 %package -n mlogc
 Summary:	ModSecurity Audit Log Collector
 Group:		Networking/Daemons/HTTP
-Requires:	%{name} = %{version}
+Requires:	%{name} = %{version}-%{release}
 
 %description -n mlogc
 This package contains the ModSecurity Audit Log Collector.
 
 %prep
 %setup -q -n modsecurity-v%{version}
+%patch -P0 -p1
 
 %build
-%configure
+%{__libtoolize}
+%{__aclocal} -I build
+%{__autoconf}
+%{__autoheader}
+%{__automake}
+%configure \
+	--with-curl=%{_prefix} \
+	--with-lua \
+	--with-pcre2 \
+	--with-ssdeep \
+	--with-yajl
 %{__make} \
 	CC="%{__cc}" \
 	CFLAGS="%{optflags}" \
 	top_dir="%{apachelibdir}"
 
+%if %{with tests}
+%{__make} test
+%endif
+%if %{with regression_tests}
+%{__make} test-regression
+%endif
+
 %install
 rm -rf $RPM_BUILD_ROOT
 install -d $RPM_BUILD_ROOT{%{apachelibdir},%{apacheconfdir}/modsecurity.d/activated_rules} \
diff --git a/apu-crypto-includes.patch b/apu-crypto-includes.patch
new file mode 100644
index 0000000..5f998e7
--- /dev/null
+++ b/apu-crypto-includes.patch
@@ -0,0 +1,14 @@
+apr_crypto.h comes from apu-1-config --includes, which the APU_HAVE_CRYPTO test never adds;
+with apr and apr-util headers in separate dirs the header is not found and SecRemoteRule crypto is silently disabled.
+
+--- modsecurity-v2.9.14/configure.ac	2026-07-02 20:46:03.000000000 +0200
++++ modsecurity-v2.9.14/configure.ac	2026-09-10 22:52:48.946593923 +0200
+@@ -901,7 +901,7 @@
+ # since it's already used correctly to compile modsecurity module.
+ ORIG_CFLAGS="$CFLAGS $APU_CFLAGS"
+ ORIG_CPPFLAGS="$CPPFLAGS"
+-CFLAGS="$CFLAGS $APR_CFLAGS"
++CFLAGS="$CFLAGS $APR_CFLAGS $APU_CFLAGS"
+ CPPFLAGS="$CPPFLAGS $APR_CPPFLAGS"
+ AC_LINK_IFELSE(
+ 	[AC_LANG_PROGRAM([[ #include <apr_crypto.h> ]],
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/apache-mod_security.git/commitdiff/f79edaab47dc6069b8e45c4272f5050c9de9243d