Topic: ModSecurity 2.7.0-rc3 available

[Steffen]

ModSecurity 2.7.0-rc3 Win32 now available.

More info see http://www.modsecurity.org/ and the Wiki at http://sourceforge.net/apps/mediawiki/mod-security/index.php?title=Main_Page

Also Attention for the free book, see http://www.apachelounge.com/viewtopic.php?t=4757

Note: 2.7.0 is more strict the 2.6.x, for example the Added Rules must have ID action and must be numeric. So when you get "no action id" and/or "the same action id", adjust your rules.

Steffen

Changes 11 September 2012 - 2.7.0-rc3
----------------------------------------------

* Fixed requests bigger than SecRequestBodyNoFilesLimit were truncated even engine mode was detection only.

* Fixed double close() for multipart temporary files (Thanks Seema Deepak).

* Fixed many small issues reported by Coverity Scanner (Thanks Peter Vrabek).

* Fixed format string issue in ngnix experimental code. (Thanks Eldar Zaitov).

* Added ctl:ruleRemoveTargetByTag/Msg and removed ctl:ruleUpdateTargetByTag/Msg.

* Added IIS and Ngnix platform code.

* Added new transformation utf8toUnicode.

[maskego]

Look forward the new core ruleset to release...
Can you share me the crs2.2.5 which has added action id already?

[glsmith]

Looks to me like 2.2.5 has been around since June
http://sourceforge.net/projects/mod-security/files/modsecurity-crs/0-CURRENT/

[maskego]

That's it.
New mod_security 2.7.0rc3+old crs2.2.5...=?

There is no update about crs2.2.5 since june indeed.
trustwave lab....https://mod-security.svn.sourceforge.net/svnroot/mod-security/crs/trunk/

Maybe it will release till mod_security 2.7.0 stable.