Packages / openSUSE Leap 15.6 / Productivity/Networking/Security / owasp-modsecurity-crs-apache2

[Source: owasp-modsecurity-crs]

Package: owasp-modsecurity-crs-apache2 (3.3.5-bp156.1.1)

OWASP ModSecurity Common Rule Set (CRS)

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts. Includes Apache httpd 2.x rules

Other Packages Related to owasp-modsecurity-crs-apache2:

Download owasp-modsecurity-crs-apache2

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch17 KiB5.5 KiBlist of filesDownload

Rutas de archivos del paquete (39)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /etc/apache2/conf.d/owasp-modsecurity-crs.conf
  • /etc/owasp-modsecurity-crs
  • /etc/owasp-modsecurity-crs/crs-setup.conf
  • /etc/owasp-modsecurity-crs/rules
  • /etc/owasp-modsecurity-crs/rules.conf
  • /etc/owasp-modsecurity-crs/rules.d
  • /etc/owasp-modsecurity-crs/rules.d/rules.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-901-INITIALIZATION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9001-DRUPAL-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9002-WORDPRESS-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9003-NEXTCLOUD-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9004-DOKUWIKI-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9005-CPANEL-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-903.9006-XENFORO-EXCLUSION-RULES.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-905-COMMON-EXCEPTIONS.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-910-IP-REPUTATION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-912-DOS-PROTECTION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-921-PROTOCOL-ATTACK.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-922-MULTIPART-ATTACK.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-931-APPLICATION-ATTACK-RFI.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-NODEJS.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-944-APPLICATION-ATTACK-JAVA.conf
  • /etc/owasp-modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-950-DATA-LEAKAGES.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-952-DATA-LEAKAGES-JAVA.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-953-DATA-LEAKAGES-PHP.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-954-DATA-LEAKAGES-IIS.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf
  • /etc/owasp-modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf

Field source: openSUSE Leap 15.6 OSS

Usar este paquete

OpenFactory puede arrancar este sistema operativo en una máquina virtual del navegador, o iniciar una construcción que incluye el nombre nativo del paquete de este registro.

Probar openSUSE Leap 15.6 en el navegadorConstruir una imagen que incluye owasp-modsecurity-crs-apache2

Versiones, suites y repositorios

Cada fila es metadato del índice de paquetes para una versión, arquitectura, suite y repositorio. Nombres, URL y tamaños vienen de la fuente; un enlace es un punto de descarga que puede cambiar, no una redistribución de OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
3.3.5-bp156.1.1leap-15.6 / ossnoarchopenSUSE Leap 15.6 · OSS · multi-architecture17 KiB5.5 KiBnoarch/owasp-modsecurity-crs-apache2-3.3.5-bp156.1.1.noarch.rpm

Field source: openSUSE Leap 15.6 OSS

Vulnerabilidades conocidas

La asociación de paquetes está en curso.

CVEGravedadImpacto por versión
[CVE-2026-33691]

Published:

The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 3.3.9 and 4.25.0, a bypass was identified in OWASP CRS tha

High(7.5)Desconocido
Detalles (1)

  • 3.3.5-bp156.1.1 · noarch · leap-15.6

    Desconocido · Corregida: 4.29.0-1.1

    Version impact unknown

    pypi · owasp-modsecurity-crs · opensuse · tumbleweed

Última sincronización:

[Catálogo de CVE]

Sumas de comprobación

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.3.5-bp156.1.1 / noarchObservado Sep 1, 2026sha512 88ab6f324b54…3d2ec69eResumen de la fuente

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Resumen de la fuente (sha512): 88ab6f324b54130de1042c9c65917249d6791d99a54ba3ba2b25da59f4a0c34f6331967cbcd7bdbeb3d99e35bbfe3fb82a386d195226d88bfaae28a93d2ec69e

Field source: openSUSE Leap 15.6 OSS

Fuentes

  • openSUSE Leap 15.6 OSSSep 1, 2026

    Authoritative source; repository metadata signature verified

    Prueba de firma

    leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230

    Repository-signature verification record
    Signed-object SHA-256
    ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable