Mod Security 2.5.x Update

[chrismfz]

Hello people,
mod security (modsec) 2.5 is out. More specifically, 2.5.4
and with 2.5 mod security came out a nice series of rules
for this.

But WHM/Cpanel it's on 2.1.x for a long time now.
I am running on all server in Current tree updates, I tried to update
mannualy, tried to update apache with EasyApache but still
nothing. (Now running: WHM 11.23.0 cPanel 11.23.1-C24654)

When I was trying to find information on this I found a "bug"
on the cpanel's bugzilla at http://bugzilla.cpanel.net/show_bug.cgi?id=6362
Bug Id #6362
Which in it someone is already describes the 2.5 tree but nothing from cpanel's side.

Is there any update on this ? Or a manual way to update to 2.5 without breaking the EasyApache / Apache / aka: the Universe ?

Regards,
Chris

[cpanelkenneth]

We are working on upgrade ModSecurity in EA3 to version 2.5

[Secmas]

We are working on upgrade ModSecurity in EA3 to version 2.5

I know this thread is very old but I need to know how to update MODSEC 2.5.9 to 2.5.11 with EasyApache, 2.5.9 has a lot of bugs.

[cPanelDon]

I know this thread is very old but I need to know how to update MODSEC 2.5.9 to 2.5.11 with EasyApache, 2.5.9 has a lot of bugs.

As of the time of writing the latest release of mod_security is 2.5.12; I don't have an ETA but I believe this will be the next version included in EasyApache. For the latest information about EasyApache updates I recommend following the official change log as seen below:
cPanel Change Log - EasyApache Build Tree

Of particular interest, I recommend subscribing to the Atom feed via your favorite web feed reader (e.g., an RSS reader):
cPanel Change Log - EasyApache (Atom Feed)

There are additional feeds available via the official change log page, including one for all build trees:
cPanel Change Log
cPanel Change Log - All (Atom Feed)

[reporter]

hello,

why easyapache just support 5.2.9 version?!
its too old!
please mach it with modsec 5.2.12
thanks.

[cPanelDon]

hello,

why easyapache just support 5.2.9 version?!
its too old!
please mach it with modsec 5.2.12
thanks.

The new version is on the way but I do not have an ETA; for more details and related information please see the following post: cPanel Forums - View Single Post - Mod Security 2.5.x Update

[config]

really want this.

[Secmas]

It is a shame that we are still stuck with 2.5.9 as 2.5.12 has a lot more advantages hardening our servers.

I have been following EasyApache Build Tree and there is nothing about 2.5.12 since I wrote my post in 02.02.2010.

We really need this.

[cPanelDon]

The newer version of mod_security is not forgotten about. There are a number of areas regarding compatibility that require more in-depth examination and lengthy testing to ensure the update is safely implemented and works as expected without causing undesired difficulty. Upon receiving any more details or upon availability in EasyApache I will ensure this thread is updated to relay pertinent news and status information. Your patience is greatly appreciated.

[Secmas]

Thank you Don, we will be waiting to hear good news in a very near future.

Regards,
Sergio

[InterServed]

One more month passed and still no sign on mod_security update progress...

Please urge the update , it's really needed.

[Secmas]

One more month passed and still no sign on mod_security update progress...

Please urge the update , it's really needed.

In February I asked for this, so, for me are more than 2 months now. Why it takes so long to update modsecurity ?

[Infopro]

While the stripped back a bit default ruleset cPanel provides is a good starting point, you can easily add an entire list of updated rulesets on your own.

[Secmas]

While the stripped back a bit default ruleset cPanel provides is a good starting point, you can easily add an entire list of updated rulesets on your own.

rulesets, lol

[InterServed]

While the stripped back a bit default ruleset cPanel provides is a good starting point, you can easily add an entire list of updated rulesets on your own.

We are not asking for rulesets , we want the software version updated