UbuntuUpdates.org

Package "libapache2-mod-security2"

Name: libapache2-mod-security2

Description:

Tighten web applications security for Apache
Latest version: 2.9.8-1.1ubuntu0.1
Release: plucky (25.04)
Level: security
Repository: universe
Head package: modsecurity-apache
Homepage: https://github.com/SpiderLabs/ModSecurity

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libapache2-mod-security2"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libapache2-mod-security2" in Plucky

Repository Area Version
base universe 2.9.8-1.1
updates universe 2.9.8-1.1ubuntu0.1

Changelog

Version: 2.9.8-1.1ubuntu0.1 2025-06-16 09:07:03 UTC

  modsecurity-apache (2.9.8-1.1ubuntu0.1) plucky-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2025-47947.patch: only sanitize arguments if they
      have not been sanitized before
    - debian/patches/CVE-2025-48866.patch: only sanitize arguments only if
      they have not been sanitized before
    - CVE-2025-47947
    - CVE-2025-48866

 -- Shishir Subedi <email address hidden> Tue, 10 Jun 2025 11:38:37 +0545
CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are
CVE-2025-48866 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a den


About   -   Send Feedback to @ubuntu_updates