ModSecurity 2.9.6 released with critical fixes

[CrazyFrog]

Release v2.9.6 · owasp-modsecurity/ModSecurity

Note: additional information on the release and some of the key changes will be published separately in short order. New features and security impacting issues Adjust parser activation rules in mo...

github.com

Could we have a version bump for CustomBuild? The patch is rather small and I already tried it out compiling it myself on a couple of machines, so I don't expect trouble.

Note that also modsecurity.conf-recommended has changed, and the changes are important for security!

The CoreRuleSet is also preparing a new release, which will make use of the new features in ModSecurity 2.9.6 / 3.0.8. However, this CRS version will NOT work (without changes) on older ModSecurity versions.

So I would recommend updating ModSecurity soon.