modsecurity-crs 3.0.0-3 source package in Ubuntu
Changelog
modsecurity-crs (3.0.0-3) unstable; urgency=medium
* Add KNOWN_BUGS file to package
* Demote libapache2-mod-security2's Dependency to Recommends so nginx
users can install modsecurity-crs. (Closes: #807033)
* Move crs-setup and EXCLUSION-RULES to /etc/modsecurity/crs to ease
user editing and package upgrading.
* Add new file owasp-crs.load which Includes the required files to get
OWASP CRS working.
-- Alberto Gonzalez Iniesta <email address hidden> Wed, 21 Dec 2016 11:23:50 +0100
Upload details
- Uploaded by:
- Alberto Gonzalez Iniesta
- Uploaded to:
- Sid
- Original maintainer:
- Alberto Gonzalez Iniesta
- Architectures:
- all
- Section:
- httpd
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| modsecurity-crs_3.0.0-3.dsc | 1.8 KiB | 98ff64f61c6d4be7517dd97351c4532357036917fc4b670133e474887a1effa2 |
| modsecurity-crs_3.0.0.orig.tar.gz | 150.2 KiB | 8b702b85fcfc3b4adaacebe343be7df82711bfc0de9292228b5c971e69c8d46e |
| modsecurity-crs_3.0.0-3.debian.tar.xz | 3.8 KiB | d73418bf9c6bd3e7638b5e0e12b3ab6e76d148e7319112d231d8d0582932bf06 |
Available diffs
- diff from 3.0.0-2 to 3.0.0-3 (1.9 KiB)
No changes file available.
Binary packages built by this source
- modsecurity-crs: OWASP ModSecurity Core Rule Set
modsecurity provides critical protections against attacks across most every
web architecture. CRS is based on generic rules which focus on attack payload
identification in order to provide protection from zero day and unknown
vulnerabilities often found in web applications, which are in most cases
custom coded.
.
Core Rules use the following techniques: HTTP request validation, HTTP
protocol anomalies, Global constraints, HTTP Usage policy, Malicious client
software detection, Generic Attack Detection (SQL injection, Cross Site
Scripting, OS Command Injection, ColdFusion, PHP and ASP injection, etc.),
Trojans & Backdoors Detection, Error Detection, XML Protection, Search Engine
Monitoring.
