Mandriva Expert
The place where your Mandriva Linux system finds support

Update for Mod_Security

+/- details
User aewhale_(AEWHC2-9105
Incident Number 99441
Date 2007/05/28 04:24
Status Incident closed
Paid Yes

Product Mandriva Linux Corporate Server 4.0
Architecture x86_32
Scope Administration

Products owned

Lines in bold below have not yet been seen by the customer - those in blue are from the customer

Username : Date : Action : Comments [ close all ]    
 

                      
aewhale_(AEWHC2-9105 : 28/05/07 04:24 AM : Incident created
-   When will mod_security be upgraged to mod_security 2.1? The current release is 1.9 for CS4, while 2006 is already at 2.0!

 

                      
Ariel_Frozza_4280 : 29/05/07 08:43 PM : Reply received
-   Hello,

the most updated version is apache-mod_security-1.9. Mandriva Spring uses
apache-mod_security-1.9.4-3mdv2007.1.

It's not possible to predict when a new version would be released.

Regards

Ariel

 

                      
aewhale_(AEWHC2-9105 : 29/05/07 09:15 PM : More info requested
-   That's interesting, because the version sent out for 2006 is 2.0.5. I got
this info:

urpmq --source mod_security
ftp://mirrors.usc.edu/pub/linux/distributions/mandrakelinux/official/2006.0/i586/media/contrib/apache-mod_security-2.0.54_1.8.7-2mdk.i586.rpm

So is 2006 running 1.9 or 2.0.5?

 

                      
Ariel_Frozza_4280 : 30/05/07 05:34 PM : More info provided
-   Hello sir,

Corporate server 4 has a more careful process of versioning. All packages are
tested for a longer period of time before an update is released.

Despite of that, contrib repository are not official, and it's not supported.

The supported version of mod_security both for CS4 and 2006 is 1.9.

Best regards

Ariel

 

                      
aewhale_(AEWHC2-9105 : 30/05/07 09:17 PM : More info requested
-   I understand the delays for updates, but when you are faced with Security
tools, Delays can be costly.

 

                      
Ariel_Frozza_4280 : 06/06/07 04:44 PM : More info provided
-   Sir,

All Linux Servers, actually, consider stability so important as security. And
stability is related with time.
As I told you, you can update mod_security from contrib. It'll work nicely,
but it's not supported by Mandriva, unfortunately.

Regards

Ariel Frozza

 

                      
aewhale_(AEWHC2-9105 : 06/06/07 05:00 PM : Incident closed
-  



This Incident is closed. It can not be edited anymore. You can create a new one by signing up/logging in your Mandriva Expert account.

  Mandriva  |  Contact  |  Legal  |  Privacy  |  Careers