Releases: coreruleset/modsecurity-crs-docker
release/20241209
Important
This release breaks the nginx images because the config tries to load a module that doesn't exist.
Please do not use this release.
What's Changed
Full Changelog: release/20241202...release/20241209
Contributors
Assets 2
release/20241202
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
Full Changelog: release/20241107...release/20241202
Contributors
Assets 2
release/20241107
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
- Fix /tmp/modsecurity/* directories permissions so nginx workers can write to them by @isavcic in #300
New Contributors
Full Changelog: release/20241030...release/20241107
Contributors
Assets 2
release/20241030
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
- chore(deps): update dependency coreruleset/coreruleset to v4.8.0 in readme.md by @renovate in #298
- chore: remove embedded certificate in openresty image by @fzipi in #297
Full Changelog: release/20241009...release/20241030
Contributors
Assets 2
release/20241009
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
- chore(deps): update nginxinc/nginx-unprivileged docker tag to v1.27.2 in readme.md by @renovate in #293
- fix: update upstream modsecurity.conf-recommended by @fzipi in #295
- fix: use MODSEC_ARGUMENTS_LIMIT in SecRule for argument count limit by @Kuppit in #294
New Contributors
Full Changelog: release/20241003...release/20241009
Contributors
Assets 2
release/20241003
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
- fix: modify Nginx Dockerfile to address OWASP ModSecurity Issue #2041 by @Dr-Lazarus-V2 in #292
Full Changelog: release/20240924...release/20241003
Contributors
Assets 2
release/20240924
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
Full Changelog: release/20240919...release/20240924
Contributors
Assets 2
release/20240919
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
- Updated Nginx Dockerfile for MaximDB support by @Dr-Lazarus-V2 in #288
New Contributors
- @Dr-Lazarus-V2 made their first contribution in #288
Full Changelog: release/20240913...release/20240919
Contributors
Assets 2
release/20240913
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
- missing \ in example command in README.md by @stefanpejcic in #283
- Correct a small typo in the README.md by @WterBerg in #282
- fix: use crs minimal in docker images by @fzipi in #285
New Contributors
- @stefanpejcic made their first contribution in #283
- @WterBerg made their first contribution in #282
Full Changelog: release/20240903...release/20240913
Contributors
Assets 2
release/20240903
Important
Do not use the *nginx images in this release. They are affected by a vulnerability in libmodsecurity3 v3.0.13.
What's Changed
This release includes new versions for modsecurity v2 and libmodsecurity v3!
| Package | Update | Change |
|---|---|---|
| ModSecurity2 | patch | 2.9.7 -> 2.9.8 |
| ModSecurity3 | patch | 3.0.12 -> 3.0.13 |
Full Changelog: release/20240828...release/20240903