Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Debian 12: 2024-2a3c8e9fb0 Low: syslog-ng Log Management Vulnerability

fedora
Calendar Grey February 20, 2024
Dist Fedora Esm H88
The security update for Libmodsecurity version 3.0.12 resolves CVE-2024-1019 specifically for users on Fedora systems. Update using the dnf package manager.
Update to 3.0.12 Security fix for CVE-2024-1019

Summary

Libmodsecurity is one component of the ModSecurity v3 project.

The library codebase serves as an interface to ModSecurity Connectors

taking in web traffic and applying traditional ModSecurity processing.

In general, it provides the capability to load/interpret rules written

in the ModSecurity SecRules format and apply them to HTTP content provided

by your application via Connectors.

Update Information:

Update to 3.0.12 Security fix for CVE-2024-1019

Change Log

* Sun Feb 11 2024 Mikel Olasagasti Uranga - 3.0.12-1 - Update to 3.0.12 rhbz#2253518 - Fix CVE-2024-1019 rhbz#2262017 rhbz#2262018 rhbz#2262019 * Thu Jan 25 2024 Fedora Release Engineering - 3.0.10-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild * Sun Jan 21 2024 Fedora Release Engineering - 3.0.10-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

References


[ 1 ] Bug #2262018 - CVE-2024-1019 libmodsecurity: WAF bypass for path-based payloads [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2262018

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4645d0fdef' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
low
Lowest
Low
Medium
High
Critical

Name: libmodsecurity
Product: Fedora 39
Version: 3.0.12
Release: 1.fc39
Summary: A library that loads/interprets rules written in the ModSecurity SecRules

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here