mod_security 1.4.2 released

Mod_security 1.4.2 has been released. It is immediately available for
download from:

    http://www.webkreator.com/mod_security/download/

This is a major release, adding a lot of new features. This
version no longer requires a patch to be made against the Apache
Web server for POST request filtering.

About mod_security
------------------
Mod_security is an Apache module whose purpose is to protect
vulnerable applications and reject human or automated attacks.
It is an open source intrusion detection and prevention system
for Apache. In addition to request filtering, it also creates Web
application audit logs. Requests are filtered using regular
expressions. Some of the things possible are:

  * Apply filters against any part of the request (URI,
    headers, either GET or POST)
  * Apply filters against individual parameters
  * Reject SQL injection attacks
  * Reject Cross site scripting attacks

With few general rules mod_security can protect from both
known and future vulnerabilities.

Changes (v1.4)
--------------
This release adds major improvements (the size of the source
code grew by 60%), including improved logging (Apache error
log, separate debug log, and audit log), two new response
actions (execute external program and redirect to a custom
URL), new features for selective filtering (variable names
and variable values), a regression testing utility and tests,
and several bugfixes.

Additionally, 1.4.1 fixes a problem with file locking on
Solaris, and a problem that would cause segfaults under
specific circumstances. Additionally, with 1.4.2 it is no
longer required to patch the web server in order to be
able to filter POST requests.