SOLVED [EA-8081] ModSecurity v2.9.3 update

[marcuszan]

I read ModSecurity has released v2.9.3
This should fix some major issues with modruid2 and permissions on folders modsecurity needed.

Any idea when this update will be released for Easy Apache 4 / cPanel users?
Or is there a manual update method suggested ?

Thanks

 

[cPanelMichael]

Hello @marcuszan,

Internal case EA-8081 is open for the inclusion of Mod_Security version 2.9.3 with EasyApache 4. I don't have a specific time frame to offer on it's release at this time, but I'll monitor the case and update this thread with more information as it becomes available.

Thank you.

 

[marcuszan]

Any update ?
Thanks !

 

[cPanelMichael]

Any update ?
Thanks !

Hi @marcuszan,

There's no update to report at this time, other than the case is still active. I'll follow-up with more information as soon as it's available.

Thank you.

 

[marcuszan]

I notice mod_sec version 2.9.3-1.1.1.cpanel is now installed with the latest cpanel updates ? Can you confirm ?

 

[cPanelMichael]

Hello @marcuszan,

ModSecurity version 2.9.3 was published for a brief period of time, however it's currently removed from the EA4 update mirrors due to the issue described on the following thread:

SOLVED - [EA-8506] ModSecurity 2.9.3 results in Apache service failures

Thank you.

 

[marcuszan]

Hello @marcuszan,

ModSecurity version 2.9.3 was published for a brief period of time, however it's currently removed from the EA4 update mirrors due to the issue described on the following thread:

SOLVED - [EA-8506] ModSecurity 2.9.3 results in Apache service failures

Thank you.

Thanks for the info Michael.
Indeed it was installed on my server. I did NOT experience any issues with Apache.
However I did the downgrade to be on the safe side and will wait for the fixed update.

Thanks

 

[cPanelMichael]

Hello @marcuszan,

You're very welcome. I don't have a firm ETA to provide at this time, but we are planning to publish the ModSecurity 2.9.3 RPM with a patch for the issue reported in case EA-8506. I'll update this thread with more information as soon as it's available.

Thank you.

 

[cPanelMichael]

Hello Everyone,

Mod_Security version 2.9.3 was published as part of today's EasyApache 4 release:

EA-8506: Fix update to Mod_Security 2.9.3: Update is segfaulting on some servers

The full EasyApache 4 change log is available on the link below:

EasyApache 4 Change Log 2019 - EasyApache 4 - cPanel Documentation

Thank you.