Modsecurity updates: nginx stable release and Google summer of code participant

Availability of modsecurity 2.7.4: nginx stable release

The
Modsecurity development team is pleased to announce the availability of modsecurity 2.7.4 stable release. This release includes des fixing bug fixes and the nginx module version
Is now LabledStable.

Important security fix-there is a security issue fixed with this release, please check CVE-2013-2765 for more information. Upgrading is high recommended.

We also added support for
Libinjection library as a new operator called
@ Detectsqli. I will be doing a separate blog post on libinjection as it deserves more attention.

Please see the release notes stored in the changes file. For known problems and more information about bug fixes, please see
Modsecurity Jira. You can optionally report any bug to mod-security-developers@lists.sourceforge.net.

Google summer of Code participation

OWASP
Is again participant ipating organization in
Google's summer of code (gsoc) program which provides stipends to student developers to write code for approved open source projects. I am excited to announce that one of OWASP's gsoc slots was awarded
Mihai pitu who will be working on

Java port of modsecurity! Here is the Abstract:

The goal of this gsoc project is to have a modsecurity version that can be used within Java servers (e.g. tomcat ). in order to achieve this, the standalone C code will be wrapped using the JNI framework and the resulting modsecurity Java project will
Be used as a module for Tomcat server. Also, we will collaborate with the OWASP webgoat team in order to integrate modsecurity for Java into it.

Mihai's complete submission is
Here. The main problem this project solves is that you will no longer have to front-end your Java app servers with a reverse proxy in order to gain modsecurity protections! Modsecurity standalone code will use JNI to hook into Java servers (tomcat, spring,
Stuts, Etc...) as a servlet filter.

If you want to follow along with our gsoc development over the summer, you can check out
Mihai's GitHub repo.