Stay Secure with the Latest Linux Advisories

security advisoryFedoramod_security

Fedora 10: 2009-2686 Moderate: Mod_Security DoS Protection

Security fixes for potential denials of service when using PDF XSS protection as well as when parsing multipart requests.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2009-2686 2009-03-13 18:04:33 --------------------------------------------------------------------------------Name : mod_security Product : Fedora 10 Version : 2.5.9 Release : 1.fc10 URL : https://modsecurity.org/ Summary : Security module for the Apache HTTP Server Description : ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks. --------------------------------------------------------------------------------Update Information: Security fixes for potential denials of service when using PDF XSS protection as well as when parsing multipart requests. ;group_id=68846 --------------------------------------------------------------------------------ChangeLog: * Thu Mar 12 2009 Michael Fleming 2.5.9-1 - Update to upstream release 2.5.9 - Fixes potential DoS' in multipart request and PDF XSS handling * Mon Dec 29 2008 Michael Fleming 2.5.7-1 - Update to upstream 2.5.7 - Reinstate mlogc --------------------------------------------------------------------------------This update can be installed with the "yum" update program. Use su -c 'yum update mod_security' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ Fedora-package-announce mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Updates in mod_security 2.5.9 for Fedora 10 resolve possible Denial of Service vulnerabilities linked to PDF XSS handling and multipart transmissions.. Fedora Security Updates, Mod Security Fixes, PDF Denial of Service. . LinuxSecurity.com Team

Mar 13, 2009 Fedora