-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-8aa264d5c5 2023-04-22 01:11:17.771619 --------------------------------------------------------------------------------
Name : mod_security Product : Fedora 36 Version : 2.9.7 Release : 1.fc36 URL : http://www.modsecurity.org/ Summary : Security module for the Apache HTTP Server Description : ModSecurity is an open source intrusion detection and prevention engine for web applications. It operates embedded into the web server, acting as a powerful umbrella - shielding web applications from attacks.
-------------------------------------------------------------------------------- Update Information:
- new version 2.9.7 - switch to PCRE2 -------------------------------------------------------------------------------- ChangeLog:
* Thu Apr 13 2023 Lubo�� Uhliarik luhliari@redhat.com - 2.9.7-1 - new version 2.9.7 - use pcre2 instead of deprecated pcre (rhbz #2128330) * Thu Jan 19 2023 Fedora Release Engineering releng@fedoraproject.org - 2.9.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2128330 - Please port your pcre dependency to pcre2. Pcre has been deprecated https://bugzilla.redhat.com/show_bug.cgi?id=2128330 [ 2 ] Bug #2163645 - CVE-2022-48279 mod_security: incorrect parsing of HTTP multipart requests leads to web application firewall bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2163645 [ 3 ] Bug #2163649 - CVE-2023-24021 mod_security: modsecurity: lacking the complete content in FILES_TMP_CONTENT leads to web application firewall bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2163649 [ 4 ] Bug #2186389 - mod_security-2.0.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2186389 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-8aa264d5c5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------