UbuntuUpdates.org

Package "modsecurity-apache"

Name: modsecurity-apache

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Tighten web applications security for Apache
Latest version: 2.9.8-1.1ubuntu0.1
Release: plucky (25.04)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "modsecurity-apache" in Plucky

Repository Area Version
base universe 2.9.8-1.1
updates universe 2.9.8-1.1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.9.8-1.1ubuntu0.1 2025-06-16 09:07:03 UTC

  modsecurity-apache (2.9.8-1.1ubuntu0.1) plucky-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2025-47947.patch: only sanitize arguments if they
      have not been sanitized before
    - debian/patches/CVE-2025-48866.patch: only sanitize arguments only if
      they have not been sanitized before
    - CVE-2025-47947
    - CVE-2025-48866

 -- Shishir Subedi <email address hidden> Tue, 10 Jun 2025 11:38:37 +0545
CVE-2025-47947 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are
CVE-2025-48866 ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions prior to 2.9.10 contain a den


About   -   Send Feedback to @ubuntu_updates