[SECURITY] Fedora 38 Update: mod_security-2.9.7-1.fc38
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-bc61f7a145
2023-04-22 00:46:16.249865
--------------------------------------------------------------------------------
Name : mod_security
Product : Fedora 38
Version : 2.9.7
Release : 1.fc38
URL : http://www.modsecurity.org/
Summary : Security module for the Apache HTTP Server
Description :
ModSecurity is an open source intrusion detection and prevention engine
for web applications. It operates embedded into the web server, acting
as a powerful umbrella - shielding web applications from attacks.
--------------------------------------------------------------------------------
Update Information:
- new version 2.9.7 - switch to PCRE2
--------------------------------------------------------------------------------
ChangeLog:
* Thu Apr 13 2023 Lubo�� Uhliarik <luhliari(a)redhat.com> - 2.9.7-1
- new version 2.9.7
- use pcre2 instead of deprecated pcre (rhbz #2128330)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2128330 - Please port your pcre dependency to pcre2. Pcre has been
deprecated
https://bugzilla.redhat.com/show_bug.cgi?id=2128330
[ 2 ] Bug #2163645 - CVE-2022-48279 mod_security: incorrect parsing of HTTP multipart
requests leads to web application firewall bypass [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2163645
[ 3 ] Bug #2163649 - CVE-2023-24021 mod_security: modsecurity: lacking the complete
content in FILES_TMP_CONTENT leads to web application firewall bypass [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2163649
[ 4 ] Bug #2186389 - mod_security-2.0.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2186389
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-bc61f7a145' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------