[ MDVSA-2010:050 ] apache-mod_security

[dude67]

_______________________________________________________________________

Package : apache-mod_security
Date : February 26, 2010
Affected: Corporate 4.0, Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

This release fixes several important issues to help prevent a detection
bypass and denial of service attacks against ModSecurity. Quite a few
small but notable bugs were fixed. The latest Core Ruleset (2.0.5)
is included.

This update provides mod_security 2.5.12, which is not vulnerable to
these issues.
_______________________________________________________________________

References:

http://www.openwall.com/lists/oss-security/2010/02/10/2
_______________________________________________________________________