--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2012-13478
2012-11-15 19:09:33
--------------------------------------------------------------------------------
Name : mod_security
Product : Fedora EPEL 6
Version : 2.7.1
Release : 3.el6
URL :
http://www.modsecurity.org/
Summary : Security module for the Apache HTTP Server
Description :
ModSecurity is an open source intrusion detection and prevention engine
for web applications. It operates embedded into the web server, acting
as a powerful umbrella - shielding web applications from attacks.
--------------------------------------------------------------------------------
Update Information:
- Update to 2.7.1
- Update Core rules set to 2.2.6
- Fix build against libxml2 >= 2.9 (upstreamed)
- Add some missing directives RHBZ #569360
- Fix multipart/invalid part ruleset bypass issue (CVE-2012-4528) (RHBZ #867424, #867773,
#867774)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #867424 - CVE-2012-4528 mod_security: multipart/invalid part ruleset bypass
https://bugzilla.redhat.com/show_bug.cgi?id=867424
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update mod_security' at the command line.
For more information, refer to "Managing Software with yum",
available at
http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------