Libmodsecurity is one component of the ModSecurity v3 project.
The library codebase serves as an interface to ModSecurity Connectors
taking in web traffic and applying traditional ModSecurity processing.
In general, it provides the capability to load/interpret rules written
in the ModSecurity SecRules format and apply them to HTTP content provided
by your application via Connectors.
Update Information:
Update to 3.0.12 Security fix for CVE-2024-1019
* Sun Feb 11 2024 Mikel Olasagasti Uranga
[ 1 ] Bug #2262018 - CVE-2024-1019 libmodsecurity: WAF bypass for path-based payloads [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2262018
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4645d0fdef' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
Get the latest Linux and open source security news straight to your inbox.