Sunday, May 29, 2011

ModSecurity Core Rule Set v2.2.0

(From Ryan Barnett)

I am pleased to announce the release of the OWASP ModSecurity Core Rule Set (CRS) v2.2.0. This is a significant update as we have added a number of very important capabilities.

CHANGE LOG -
-------------------------- Version 2.2.0 - 05/26/2011 --------------------------
Improvements: 
--------------------------
DOWNLOADING
--------------------------
Manual Downloading:
You can always download the latest CRS version here -

Automated Downloading:
Use the rules-updater.pl script in the CRS /util directory

# Get a list of what the repository contains:


modsecurity-crs {
2.0.0: modsecurity-crs_2.0.0.zip
2.0.1: modsecurity-crs_2.0.1.zip
2.0.2: modsecurity-crs_2.0.2.zip
2.0.3: modsecurity-crs_2.0.3.zip
2.0.4: modsecurity-crs_2.0.4.zip
2.0.5: modsecurity-crs_2.0.5.zip
2.0.6: modsecurity-crs_2.0.6.zip
2.0.7: modsecurity-crs_2.0.7.zip
2.0.8: modsecurity-crs_2.0.8.zip
2.0.9: modsecurity-crs_2.0.9.zip
2.0.9: modsecurity-crs_2.0.10.zip
2.1.0: modsecurity-crs_2.1.0.zip
2.1.1: modsecurity-crs_2.1.1.zip
2.1.2: modsecurity-crs_2.1.2.zip
2.2.0: modsecurity-crs_2.2.0.zip
}

# Get the latest stable version of "modsecurity-crs":
$ ./rules-updater.pl -rhttp://www.modsecurity.org/autoupdate/repository/ -prules -Smodsecurity-crs
Fetching: modsecurity-crs/modsecurity-crs_2.2.0.zip ...
$ ls -R rules
modsecurity-crs

rules/modsecurity-crs:
modsecurity-crs_2.2.0.zip modsecurity-crs_2.2.0.zip.sig

--
Ryan Barnett
OWASP ModSecurity CRS Project Leader

No comments: