Fedora 10: 2009-2686 Moderate: Mod_Security DoS Protection

ModSecurity is an open source intrusion detection and prevention engine

for web applications. It operates embedded into the web server, acting

as a powerful umbrella - shielding web applications from attacks.

Security fixes for potential denials of service when using PDF XSS protection as

well as when parsing multipart requests.

;group_id=68846

* Thu Mar 12 2009 Michael Fleming 2.5.9-1

- Update to upstream release 2.5.9

- Fixes potential DoS' in multipart request and PDF XSS handling

* Mon Dec 29 2008 Michael Fleming 2.5.7-1

- Update to upstream 2.5.7

- Reinstate mlogc

su -c 'yum update mod_security' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/