Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: ModSecurity 2.5.3 Released |
|
| Author |
|
Steffen
Moderator
Joined: 15 Oct 2005
Posts: 3117
Location: Hilversum, NL, EU
|
 Posted: Sat 26 Apr '08 18:13 Post subject: ModSecurity 2.5.3 Released |
 |
|
ModSecurity 2.5.3 was released today with Core Rules 1.6.1. ModSecurity fixes a few minor issues, however the Core Rules fixed a number of issues which may miss detection. Please consider the upgrade to Core Rules 1.6.1 a required upgrade if you are currently running 1.6.0. While you should keep up-to-date with ModSecurity releases, 2.5.3 is not required unless you are running into the issues that have been fixed.
Changes with 2.5.3:
* Fixed issue where the exec action may not be able to execute shell scripts.
* Macros are now expanded in expirevar and deprecatevar.
* Fixed crash if a persistent variable name was more than 126 haracters.
* Updated included Core Ruleset to version 1.6.1 which fixes some false negative issues in the migration to using some 2.5 features.
Windows binary, with LUA and Libxml enabled, can be downloaded from Apache Lounge as always. Updated also libxml2 to version 2.6.32.
Steffen |
|
| Back to top |
|
|
|
|
|
|
