FEDORA-2022-1fd73a5285 — security update for mod_security and mod_security_crs

stable

mod_security-2.9.6-1.fc37 and mod_security_crs-3.3.4-1.fc37

FEDORA-2022-1fd73a5285 created by luhliarik 3 years ago for Fedora 37

version update
security fixes

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-1fd73a5285

This update has been submitted for testing by luhliarik.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update's test gating status has been changed to 'failed'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to stable.

3 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

Builds

mod_security-2.9.6-1.fc37

mod_security_crs-3.3.4-1.fc37

BZ#2131316 CVE-2022-39955 mod_security_crs: Multiple charsets defined in Content-Type header [fedora-all]

BZ#2131318 CVE-2022-39956 mod_security_crs: Content-Type or Content-Transfer-Encoding MIME header fields abuse [fedora-all]

BZ#2131320 CVE-2022-39957 mod_security_crs: Charset accept header field resulting in response rule set bypass [fedora-all]

BZ#2131322 CVE-2022-39958 mod_security_crs: Small range header leading to response rule set bypass [fedora-all]

mod_security-2.9.6-1.fc37

mod_security_crs-3.3.4-1.fc37

Automated Test Results

ignored