ELBA-2024-18275

ELBA-2024-18275 - libmodsecurity Bug Fix update

Type:	BUG
Impact:	NA
Release Date:	2024-02-20

Description

[3.0.12-1]
- Update to 3.0.12 rhbz#2253518
- Fix CVE-2024-1019 rhbz#2262017 rhbz#2262018 rhbz#2262019

[3.0.10-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[3.0.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

[3.0.10-1]
- Update to 3.0.10 rhbz#2225895

[3.0.9-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

[3.0.9-2]
- Use geoip instead of libmaxminddb for EPEL 7 and 8 builds

[3.0.9-1]
- 2828.patch: drop, included in 3.0.9
- Remove deps required for autoreconf
- Minor cosmetic change for configure
- ModSecurity_cookie_parsing_fix_303.patch: remove as not required since 3.0.4
- 0001-Fix-build-on-non-x86-arch.patch: remove as not required since 3.0.4
- modsecurity.pc: drop as is being shipped since 3.0.3

[3.0.8-3]
- Use PCRE2 rhbz#2128321
- Use libmaxminddb instead of old GeoIP
- Migrate to SPDX identifier for License
- Change homepage
- Remove .la file for EPEL

[3.0.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

[3.0.8-1]
- Update to maintenance release 3.0.8

[3.0.4-7]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[3.0.4-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

[3.0.4-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[3.0.4-4]
- Rebuilt for removed libstdc++ symbol (#1937698)

[3.0.4-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[3.0.4-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.0.4-1]
- Update to 3.0.4
- Drop the patch (included in this release)

[3.0.3-6]
- Fix DoS vulnerability (CVE-2019-19886, RHBZ #1801720 / #1801719)

[3.0.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[3.0.3-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[3.0.3-1]
- Update to 3.0.3 (rhbz #1672678)
- Remove pkg-config bits since it's included in this release

[3.0.2-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[3.0.2-4]
- Back-port of modsecurity.pc

[3.0.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[3.0.2-2]
- Rebuild after PR#1

[3.0.2-1]
- Update to 3.0.2 (rhbz #1563219)

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libmodsecurity-3.0.12-1.el8.src.rpm	b5ebf4c01779fab89eb038f7f1131f72775adb9ea27e194060dab8ea67264338	-	ol8_aarch64_developer_EPEL
	libmodsecurity-3.0.12-1.el8.aarch64.rpm	3a5a6ae125eecbecc6b668163fd60bd61ca02214ea4ada5a52526697b0f69b2e	-	ol8_aarch64_developer_EPEL
	libmodsecurity-devel-3.0.12-1.el8.aarch64.rpm	08488111cbc75d7dec8784d069c2a6d8eaf7df6bd31896bf986f9bfac93895dd	-	ol8_aarch64_developer_EPEL
	libmodsecurity-static-3.0.12-1.el8.aarch64.rpm	e1aaf0c83f4fd9ed86c7cbd5fa3ab3f2f05212d21beff9e2c3a162f761fe1298	-	ol8_aarch64_developer_EPEL
Oracle Linux 8 (x86_64)	libmodsecurity-3.0.12-1.el8.src.rpm	b5ebf4c01779fab89eb038f7f1131f72775adb9ea27e194060dab8ea67264338	-	ol8_x86_64_developer_EPEL
	libmodsecurity-3.0.12-1.el8.x86_64.rpm	2bcc833a50db44e813b09266a28ae53e3888511724e2e572afe5bf741178920c	-	ol8_x86_64_developer_EPEL
	libmodsecurity-devel-3.0.12-1.el8.x86_64.rpm	92c5bbb0a65c93dcb49ff372a7ed9691392a72ce484e7e4fb4d3d54fc2aac07a	-	ol8_x86_64_developer_EPEL
	libmodsecurity-static-3.0.12-1.el8.x86_64.rpm	e85e7b0f9775ef33fa740cf67eb1f623622c7525b6bd54f2addd197007d8ba0b	-	ol8_x86_64_developer_EPEL

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team