ELBA-2024-2347

ELBA-2024-2347 - mod_security_crs bug fix and enhancement update

Type:	BUG
Impact:	NA
Release Date:	2024-05-02

Description

[3.3.4-3]
- Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
REQUEST-913-SCANNER-DETECTION.conf blocks requests with 'User-agent:
urlgrabber/3.10 yum/3.4.3'

[3.3.4-2]
- Resolves: RHEL-16358 - A form data, '??'(Company in Japanese) is forbade
with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	mod_security_crs-3.3.4-3.el9.src.rpm	47544ce3f84b741f0173a615148f290f4f6f27409f6d04a7572efc39d8c5280f	-	ol9_aarch64_appstream
	mod_security_crs-3.3.4-3.el9.noarch.rpm	049626fa69c9b5574ce375905e6f4b6d53d2ee1981af4df9ef3a5f64a66e0347	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	mod_security_crs-3.3.4-3.el9.src.rpm	47544ce3f84b741f0173a615148f290f4f6f27409f6d04a7572efc39d8c5280f	-	ol9_x86_64_appstream
	mod_security_crs-3.3.4-3.el9.noarch.rpm	049626fa69c9b5574ce375905e6f4b6d53d2ee1981af4df9ef3a5f64a66e0347	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team