Packages / openSUSE Leap 16.0 / Productivity/Networking/Security / owasp-modsecurity-crs-apache2

[Source: owasp-modsecurity-crs]

Package: owasp-modsecurity-crs-apache2 (3.3.5-bp160.1.9)

OWASP ModSecurity Common Rule Set (CRS)

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts. Includes Apache httpd 2.x rules

Other Packages Related to owasp-modsecurity-crs-apache2:

Download owasp-modsecurity-crs-apache2

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch16 KiB5.5 KiBlist of filesDownload

Paketdateipfade (39)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/apache2/conf.d/owasp-modsecurity-crs.conf
  • /etc/owasp-modsecurity-crs
  • /etc/owasp-modsecurity-crs/crs-setup.conf
  • /etc/owasp-modsecurity-crs/rules
  • /etc/owasp-modsecurity-crs/rules.conf
  • /etc/owasp-modsecurity-crs/rules.d
  • /etc/owasp-modsecurity-crs/rules.d/rules.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-901-INITIALIZATION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9001-DRUPAL-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9002-WORDPRESS-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9004-DOKUWIKI-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9005-CPANEL-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9006-XENFORO-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-905-COMMON-EXCEPTIONS.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-910-IP-REPUTATION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-912-DOS-PROTECTION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-921-PROTOCOL-ATTACK.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-922-MULTIPART-ATTACK.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-931-APPLICATION-ATTACK-RFI.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-944-APPLICATION-ATTACK-JAVA.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-950-DATA-LEAKAGES.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-952-DATA-LEAKAGES-JAVA.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-953-DATA-LEAKAGES-PHP.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-954-DATA-LEAKAGES-IIS.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf

Field source: openSUSE Leap 16.0 OSS

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

openSUSE Leap 16.0 im Browser testenImage mit owasp-modsecurity-crs-apache2 bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
3.3.5-bp160.1.9leap-16.0 / ossnoarchopenSUSE Leap 16.0 · OSS · multi-architecture16 KiB5.5 KiBnoarch/owasp-modsecurity-crs-apache2-3.3.5-bp160.1.9.noarch.rpm

Field source: openSUSE Leap 16.0 OSS

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-33691]

Published:

The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.9 and 4.25.0, a bypass was identified in OWASP CRS tha

High(7.5)Unbekannt
Details (1)

  • 3.3.5-bp160.1.9 · noarch · leap-16.0

    Unbekannt · Behoben: 4.29.0-1.1

    Version impact unknown

    pypi · owasp-modsecurity-crs · opensuse · tumbleweed

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.3.5-bp160.1.9 / noarchBeobachtet Sep 1, 2026sha512 92c4c8737fa2…575c92a5Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha512): 92c4c8737fa251e0e347c126ec23858ecc99ae51ffd9989fb48d4af4b9e3288715bef841130637e955f65596977dd1deb43a3447a7fa5e426a635bdf575c92a5

Field source: openSUSE Leap 16.0 OSS

Quellen

  • openSUSE Leap 16.0 OSSSep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

    Repository-signature verification record
    Signed-object SHA-256
    271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable