[Bug 231728] CVE-2007-1359: mod_security <= 2.1.0 request rule bypass
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.
Summary: CVE-2007-1359: mod_security <= 2.1.0 request rule bypass
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=231728
------- Additional Comments From ville.skytta(a)iki.fi 2007-03-11 06:24 EST -------
If the rules from 1.9.x are not usable with 2.1.0 as is, they should be marked
as %config, not %config(noreplace). And reverted back to %config(noreplace)
later in the future where it is no longer expected that people will not be
upgrading from 1.9.x to the current version at that time, but rather from a
version whose config syntax is compatible.
--
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.