*** This bug is a security vulnerability *** You have been subscribed to a public security bug by Marc Deslauriers (mdeslaur):
Binary package hint: libapache-mod-security As suggested I am filing a bug. Lucid package is ModSecurity v2.5.11 based, however v2.5.12 was released on Feb 4, 2010, with the following note. "ModSecurity v2.5.12 (change log) has been released. This release fixes several important issues to help prevent a detection bypass and denial of service attacks against ModSecurity. " I see a package on Maverick, however have no desire to switch away from LTS at this time. Is there a projected timeline for a Lucid update to 2.5.12? Thanks, Scott ** Affects: libapache-mod-security (Ubuntu) Importance: Undecided Status: New ** Tags: dos -- security fixes in latest release https://bugs.edge.launchpad.net/bugs/602947 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs