ELBA-2024-18275

ELBA-2024-18275 - libmodsecurity Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2024-02-20

Description

[3.0.12-1]
- Update to 3.0.12 rhbz#2253518
- Fix CVE-2024-1019 rhbz#2262017 rhbz#2262018 rhbz#2262019

[3.0.10-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[3.0.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[3.0.10-1]
- Update to 3.0.10 rhbz#2225895

[3.0.9-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[3.0.9-2]
- Use geoip instead of libmaxminddb for EPEL 7 and 8 builds

[3.0.9-1]
- 2828.patch: drop, included in 3.0.9
- Remove deps required for autoreconf
- Minor cosmetic change for configure
- ModSecurity_cookie_parsing_fix_303.patch: remove as not required since 3.0.4
- 0001-Fix-build-on-non-x86-arch.patch: remove as not required since 3.0.4
- modsecurity.pc: drop as is being shipped since 3.0.3

[3.0.8-3]
- Use PCRE2 rhbz#2128321
- Use libmaxminddb instead of old GeoIP
- Migrate to SPDX identifier for License
- Change homepage
- Remove .la file for EPEL

[3.0.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[3.0.8-1]
- Update to maintenance release 3.0.8

[3.0.4-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[3.0.4-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[3.0.4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[3.0.4-4]
- Rebuilt for removed libstdc++ symbol (#1937698)

[3.0.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[3.0.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.0.4-1]
- Update to 3.0.4
- Drop the patch (included in this release)

[3.0.3-6]
- Fix DoS vulnerability (CVE-2019-19886, RHBZ #1801720 / #1801719)

[3.0.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[3.0.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.0.3-1]
- Update to 3.0.3 (rhbz #1672678)
- Remove pkg-config bits since it's included in this release

[3.0.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[3.0.2-4]
- Back-port of modsecurity.pc

[3.0.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.0.2-2]
- Rebuild after PR#1

[3.0.2-1]
- Update to 3.0.2 (rhbz #1563219)

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libmodsecurity-3.0.12-1.el8.src.rpm	b3930b00737ec5bc9e7ad358e2aec029	-	ol8_aarch64_developer_EPEL
	libmodsecurity-3.0.12-1.el8.aarch64.rpm	03f93057e96ae616715f04fed14d1428	-	ol8_aarch64_developer_EPEL
	libmodsecurity-devel-3.0.12-1.el8.aarch64.rpm	f798d050aa8d3d7a63494baa19554d1f	-	ol8_aarch64_developer_EPEL
	libmodsecurity-static-3.0.12-1.el8.aarch64.rpm	651b7eef390d07630183b0e99bc98f9a	-	ol8_aarch64_developer_EPEL
Oracle Linux 8 (x86_64)	libmodsecurity-3.0.12-1.el8.src.rpm	b3930b00737ec5bc9e7ad358e2aec029	-	ol8_x86_64_developer_EPEL
	libmodsecurity-3.0.12-1.el8.x86_64.rpm	586e9bde549591fa03d62a180c1922ef	-	ol8_x86_64_developer_EPEL
	libmodsecurity-devel-3.0.12-1.el8.x86_64.rpm	e603d2353cba0afaef6e8076e6520e54	-	ol8_x86_64_developer_EPEL
	libmodsecurity-static-3.0.12-1.el8.x86_64.rpm	b05d4b2eeb0562e40257a9811db9ac5a	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team