Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: CVE-2007-1359: mod_security <= 2.1.0 request rule bypass https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=231728 ------- Additional Comments From ville.skytta@xxxxxx 2007-03-11 06:24 EST ------- If the rules from 1.9.x are not usable with 2.1.0 as is, they should be marked as %config, not %config(noreplace). And reverted back to %config(noreplace) later in the future where it is no longer expected that people will not be upgrading from 1.9.x to the current version at that time, but rather from a version whose config syntax is compatible. -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is. -- Fedora-security-list mailing list Fedora-security-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-security-list
