da build versions lists update that's not there

[dkzr]

Hi,

I'm using the OWASP ModSecurity rule set and I'm still on v3 of that.
So I've configured /usr/local/directadmin/custombuild/custom_versions.txt with the line: "modsecurity-rules-owasp:3.3.10" (v3.3.10 is the most recent v3 version).

Running `da build update_versions` works fine but now when I run `da build versions` I get:

NOTE: Some custom versions are set in /usr/local/directadmin/custombuild/custom_versions.txt, this may prevent showing the actual latest version of the software: modsecurity-rules-owasp (3.3.10)

Latest version of ConfigServer Security and Firewall: 15.07
Installed version of ConfigServer Security and Firewall: 15.07

Latest version of Apache: 2.4.68
Installed version of Apache: 2.4.68

Latest version of OWASP ModSecurity Rule Set: 3.3.10
Installed version of OWASP ModSecurity Rule Set: 3.31.0

[B]OWASP ModSecurity Rule Set 3.31.0 to 3.3.10 update is available.[/B]

Latest version of Pure-FTPd: 1.0.54
Installed version of Pure-FTPd: 1.0.54

I have no idea where the 3.31.0 comes from... It does not seem to be in the OWASP source

 

[LawsHosting]

Maybe they do not have the v3 branch anymore?

Installed version of OWASP ModSecurity Rule Set: 4.27.0

 

[dkzr]

Setting a custom version in custom_versions.txt works, see my post.

When I check /etc/modsecurity.d/ the actual installed version is v3.3.10. So somewhere "something" logs v3.31.0 to be installed but don't know what or where.

 

[zEitEr]

Hello,

What version do you have in /usr/local/directadmin/custombuild/custom_versions.txt ?

Is it still 3.31.0 or 3.3.10? Is the point sign in the correct places?

 

[dkzr]

content is:

modsecurity-rules-owasp:3.3.10

 

[zEitEr]

Probably a bug in the version parsing. Just a raw guess, I did not check it on my side