mod_security Question

[Imaging]

On our ASL boxes, mod_security is up to:

mod_security-2.8.0-24.el5

released shortly after the -23 revision.

On .23 it appears that mod_security was 2.8.x as some of the deprecated configs in the conf file were updated as well. The -24 revision appears to have gone back to a 2.7.x engine (with back ports perhaps) so said deprecated configs are back to what they were.

The latest revision for our rules only boxes appears to be the -23 revision.

Just checking to see if the -24 revision is forthcoming for rules only setups (in case there was some issue with 2.8.x versus the apparent back port).

Thanks.

[scott]

Due to some lingering bugs with 2.8 (even with backports from git) we decided to revert to 2.7.7 for the time being

[Imaging]

Thanks.

So for rules only boxes, is 2.8.0-23, 2.7.x or 2.8.x based? Just want to make sure it is 2.7.x for rules only boxes since it appeared to be 2.8.x based for -23 on ASL boxes. If so, then we'll wait for the -24 update before we update.

[scott]

Use 2.7.7 or 2.8.0-24, they're the same thing, just versioned differently.

[Imaging]

Thanks.