From e00d34dcc95eb8f0f8a35a81483cbe18d3eccfc6 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Tue, 12 May 2026 18:43:19 +0200 Subject: [PATCH] package/libmodsecurity: security bump version to 3.0.15 https://github.com/owasp-modsecurity/ModSecurity/blob/v3.0.15/CHANGES Fixes CVE-2026-42268 & CVE-2026-30923. Rebased patch 0001 due to upstream commit https://github.com/owasp-modsecurity/ModSecurity/commit/f38b5b7296d87e7b1744ef6b5f3dca11fe7cf886 Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- .../libmodsecurity/0001-modsecurity.pc.in-add-lstdc.patch | 6 ++++-- package/libmodsecurity/libmodsecurity.hash | 4 ++-- package/libmodsecurity/libmodsecurity.mk | 2 +- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/package/libmodsecurity/0001-modsecurity.pc.in-add-lstdc.patch b/package/libmodsecurity/0001-modsecurity.pc.in-add-lstdc.patch index 9e0b672c8d..43d1cc73f6 100644 --- a/package/libmodsecurity/0001-modsecurity.pc.in-add-lstdc.patch +++ b/package/libmodsecurity/0001-modsecurity.pc.in-add-lstdc.patch @@ -14,6 +14,8 @@ Fixes: Signed-off-by: Fabrice Fontaine Signed-off-by: Frank Vanbever +[Bernd: rebased for 3.0.15] +Signed-off-by: Bernd Kuhls --- modsecurity.pc.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) @@ -26,8 +28,8 @@ index 96cdf5ca..7c895ddc 100644 Version: @MSC_VERSION_WITH_PATCHLEVEL@ Cflags: -I@includedir@ Libs: -L@libdir@ -lmodsecurity --Libs.private: @CURL_LDADD@ @GEOIP_LDADD@ @MAXMIND_LDADD@ @GLOBAL_LDADD@ @LIBXML2_LDADD@ @LMDB_LDADD@ @LUA_LDADD@ @PCRE_LDADD@ @SSDEEP_LDADD@ @YAJL_LDADD@ -+Libs.private: @CURL_LDADD@ @GEOIP_LDADD@ @MAXMIND_LDADD@ @GLOBAL_LDADD@ @LIBXML2_LDADD@ @LMDB_LDADD@ @LUA_LDADD@ @PCRE_LDADD@ @SSDEEP_LDADD@ @YAJL_LDADD@ -lstdc++ +-Libs.private: @CURL_LDADD@ @GEOIP_LDADD@ @MAXMIND_LDADD@ @GLOBAL_LDADD@ @LIBXML2_LDADD@ @LMDB_LDADD@ @LUA_LDADD@ @PCRE_LDADD@ @PCRE2_LDADD@ @SSDEEP_LDADD@ @YAJL_LDADD@ ++Libs.private: @CURL_LDADD@ @GEOIP_LDADD@ @MAXMIND_LDADD@ @GLOBAL_LDADD@ @LIBXML2_LDADD@ @LMDB_LDADD@ @LUA_LDADD@ @PCRE_LDADD@ @PCRE2_LDADD@ @SSDEEP_LDADD@ @YAJL_LDADD@ -lstdc++ -- 2.39.2 diff --git a/package/libmodsecurity/libmodsecurity.hash b/package/libmodsecurity/libmodsecurity.hash index 821459f6b9..aab9d14d67 100644 --- a/package/libmodsecurity/libmodsecurity.hash +++ b/package/libmodsecurity/libmodsecurity.hash @@ -1,4 +1,4 @@ -# From https://github.com/owasp-modsecurity/ModSecurity/releases/download/v3.0.14/modsecurity-v3.0.14.tar.gz.sha256 -sha256 f7599057b35e67ab61764265daddf9ab03c35cee1e55527547afb073ce8f04e8 modsecurity-v3.0.14.tar.gz +# From https://github.com/owasp-modsecurity/ModSecurity/releases/download/v3.0.15/modsecurity-v3.0.15.tar.gz.sha256 +sha256 c276c838df6b61d96aa52075aee17d426af52755e16d09edca9f9d718696fda7 modsecurity-v3.0.15.tar.gz # Locally calculated sha256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4 LICENSE diff --git a/package/libmodsecurity/libmodsecurity.mk b/package/libmodsecurity/libmodsecurity.mk index a90fa1d614..c06d890979 100644 --- a/package/libmodsecurity/libmodsecurity.mk +++ b/package/libmodsecurity/libmodsecurity.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBMODSECURITY_VERSION = 3.0.14 +LIBMODSECURITY_VERSION = 3.0.15 LIBMODSECURITY_SOURCE = modsecurity-v$(LIBMODSECURITY_VERSION).tar.gz LIBMODSECURITY_SITE = https://github.com/owasp-modsecurity/ModSecurity/releases/download/v$(LIBMODSECURITY_VERSION) LIBMODSECURITY_INSTALL_STAGING = YES