Mod_security 2.6.7 for Apache 2.2.x & 2.4.x Released
Written by Administrator
Monday, 23 July 2012 22:07
Announcing the release of mod_security 2.6.7 for Apache 2.2 and 2.4. This is primarily a bug fix and new features release. The information in the CHANGES file is;
Fixed PCRE mismtach version warning message (Thanks Victor Julien).
Fixed explicit target replacement using SecUpdateTargetById was broken.
The ctl:ruleUpdateTargetById is deprecated and will be removed for future versions since
there is no safe way to use it per-request.
Added ctl:ruleRemoveTargetById that can be used to exclude targets to be processed per-request.
Binaries as always are available on our Download page.
Mod_security 2.6.6 for Apache 2.2.x & 2.4.x Released
Written by Administrator
Sunday, 24 June 2012 05:55
Announcing the release of mod_security 2.6.6 for Apache 2.2 and 2.4. This is primarily a security related release. See the CHANGES file for more information.
Binaries as always are available on our Download page.
OpenSSL 0.9.8x & 1.0.1c updates available for Apahe 2.2.22 & 2.4.2
Written by Administrator
Friday, 11 May 2012 08:10
A flaw in the OpenSSL handling of CBC mode ciphersuites in TLS 1.1, 1.2 and
DTLS can be exploited in a denial of service attack on both clients and
servers. Affects all versions of OpenSSL prior to and including 1.0.1b, 1.0.0i & 0.9.8w
Get your OpenSSL 0.9.8x or 1.0.1c updates for Apache 2.2.22 & 2.4.2 on our download page.
OpenSSL 0.9.8w updates available for Apache 2.2.22 & 2.4.2
Written by Administrator
Wednesday, 25 April 2012 01:47
The fix for CVE-2012-2110 in openSSL 0.9.8v was not sufficient to correct the ASN1 BIO vulnerability issue so version 0.9.8w has been released and is available on our download page now.
Mod GeoIP 1.2.7 now available for Apache 2.2.x & 2.4.x
Written by Administrator
Sunday, 22 April 2012 19:18
mod_geoip 1.2.7 we have had available for Apache 2.4 here for a couple weeks and I finally got around to building it against Apache 2.2.22. This version has IPv6 support in the official source. The IPv6 support is still considered experimental, but official code instead of Sob's patch we had used for 1.2.5+IPv6 (Thanks Sob!). It uses the GeoLite Standard and IPv6 Country & City databases available at Maxmind.com. All of our versions of Apache now include IPv6 support so you may want to give this module a try. You can get mod_geoip/1.2.7 from our download page.
Announcements
