-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2013-10445 2013-06-13 21:44:47 --------------------------------------------------------------------------------
Name : fail2ban Product : Fedora EPEL 6 Version : 0.8.10 Release : 1.el6 URL : http://fail2ban.sourceforge.net/ Summary : Ban IPs that make too many password failures Description : Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/error_log and bans IP that makes too many password failures. It updates firewall rules to reject the IP address.
To use the hostsdeny and shorewall actions you must install tcp_wrappers and shorewall respectively.
-------------------------------------------------------------------------------- Update Information:
Fail2Ban 0.8.10 addresses a possible remote denial of service attack when using the supplied apache- filters. -------------------------------------------------------------------------------- References:
[ 1 ] Bug #973756 - CVE-2013-2178 fail2ban: remote denial of service due to apache log parsing issue https://bugzilla.redhat.com/show_bug.cgi?id=973756 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update fail2ban' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org