Alerts This Week
Warning Icon 1 1,153
Alerts This Week
Warning Icon 1 1,153

Debian Bullseye DLA-4192-1: modsecurity-apache DoS Correction

debian lts
Calendar Grey May 29, 2025
Dist Debian Esm H88
Severe DoS flaw addressed in modsecurity-apache for Debian 11, accompanied by a security notice urging users to upgrade their packages.
DoS with sanitiseMatchedBytes has been fixed in modsecurity-apache, a module for the Apache webserver to tighten Web application security
Topics%20covered

Topics Covered

security advisory update debian web application DoS modsecurity

Summary

For Debian 11 bullseye, this problem has been fixed in version
2.9.3-3+deb11u3.

We recommend that you upgrade your modsecurity-apache packages.

For the detailed security status of modsecurity-apache please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/modsecurity-apache

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: modsecurity-apache
Version: 2.9.3-3+deb11u3
CVE ID: CVE-2025-47497
Debian Bug: 1106286

Topics%20covered

Topics Covered

security advisory update debian web application DoS modsecurity

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here