[SECURITY] Fedora EPEL 5 Update: mod_security-2.5.12-1.el5

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2010-0216
2010-02-17 16:38:55
--------------------------------------------------------------------------------

Name        : mod_security
Product     : Fedora EPEL 5
Version     : 2.5.12
Release     : 1.el5
URL         : http://www.modsecurity.org/
Summary     : Security module for the Apache HTTP Server
Description :
ModSecurity is an open source intrusion detection and prevention engine
for web applications. It operates embedded into the web server, acting
as a powerful umbrella - shielding web applications from attacks.

--------------------------------------------------------------------------------
Update Information:

SECURITY: This release fixes several issues including potential rule bypass and
Denial of Service attacks.    This also updates the Core Rules to 2.x with many
enhancements. Administrators however should upgrade carefully in production
environments to ensure ongoing application availability
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #563455 - ModSecurity: Multiple security fixes in version v2.5.12
        https://bugzilla.redhat.com/show_bug.cgi?id=563455
--------------------------------------------------------------------------------

This update can be installed with the "yum" update programs.  Use
su -c 'yum update mod_security' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------