From: Brian Rectanus <Brian.Rectanus@br...> - 2008-04-25 18:26:51
ModSecurity 2.5.3 was released today with Core Rules 1.6.1. ModSecurity
fixes a few minor issues, however the Core Rules fixed a number of
issues which may miss detection. Please consider the upgrade to Core
Rules 1.6.1 a required upgrade if you are currently running 1.6.0.
While you should keep up-to-date with ModSecurity releases, 2.5.3 is not
required unless you are running into the issues that have been fixed.
24 Apr 2008 - 2.5.3
* Fixed issue where the exec action may not be able to execute
* Macros are now expanded in expirevar and deprecatevar.
* Fixed crash if a persistent variable name was more than 126
* Updated included Core Ruleset to version 1.6.1 which fixes
some false negative issues in the migration to using some
Additionally, the ModSecurity Console v1.0.4 was released to fix a minor
issue when upgrading from the 1.0.2 version.
Packages can be downloaded from modsecurity.org as always.