UbuntuUpdates.org

Package "modsecurity-apache"

Name: modsecurity-apache

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Tighten web applications security for Apache
Latest version: 2.9.7-1ubuntu0.24.10.1
Release: oracular (24.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "modsecurity-apache" in Oracular

Repository Area Version
base universe 2.9.7-1build3
updates universe 2.9.7-1ubuntu0.24.10.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.9.7-1ubuntu0.24.10.1 2025-06-16 09:07:02 UTC

  modsecurity-apache (2.9.7-1ubuntu0.24.10.1) oracular-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2025-47947.patch: only sanitize arguments if they
      have not been sanitized before
    - debian/patches/CVE-2025-48866.patch: only sanitize arguments only if
      they have not been sanitized before
    - CVE-2025-47947
    - CVE-2025-48866

 -- Shishir Subedi <email address hidden> Tue, 10 Jun 2025 11:54:59 +0545
CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are
CVE-2025-48866 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a den


About   -   Send Feedback to @ubuntu_updates