Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Fedora 40 support back #1845

Merged
merged 4 commits into from
Dec 31, 2024
Merged

Add Fedora 40 support back #1845

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3e67dbd
Update OWASP Core Rule Set to version 4.10.0 and add CVE-2023-5003 to…
TheophileDiot Dec 30, 2024
fa05364
deps/gha: bump ruby/setup-ruby from 1.206.0 to 1.207.0
dependabot[bot] Dec 31, 2024
e346f31
Update workflows and Dockerfiles to support Fedora 40, removing refer…
TheophileDiot Dec 31, 2024
95c7a16
Merge pull request #1844 from bunkerity/dependabot/github_actions/dev…
TheophileDiot Dec 31, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/1.5.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -208,7 +208,7 @@ jobs:
package_arch: x86_64
separator: "-"
suffix: "1."
version: 41
version: 40
package: rpm
- linux: el
package_arch: x86_64
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/beta.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -199,7 +199,7 @@ jobs:
- linux: fedora
separator: "-"
suffix: "1."
version: 41
version: 40
package: rpm
- linux: el
separator: "-"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dev.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -210,7 +210,7 @@ jobs:
package_arch: x86_64
separator: "-"
suffix: "1."
version: 41
version: 40
package: rpm
- linux: el
package_arch: x86_64
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/push-packagecloud.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ jobs:
- name: Check out repository code
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Install ruby
uses: ruby/setup-ruby@bfefad842bb982ff05b233bcbc1571d97a87e69f # v1.206.0
uses: ruby/setup-ruby@4a9ddd6f338a97768b8006bf671dfbad383215f4 # v1.207.0
with:
ruby-version: "3.0"
- name: Install packagecloud
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/rc.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -199,7 +199,7 @@ jobs:
- linux: fedora
separator: "-"
suffix: "1."
version: 41
version: 40
package: rpm
- linux: el
separator: "-"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -211,7 +211,7 @@ jobs:
- linux: fedora
separator: "-"
suffix: "1."
version: 41
version: 40
package: rpm
- linux: el
separator: "-"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/staging.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -178,7 +178,7 @@ jobs:
package_arch: x86_64
separator: "-"
suffix: "1."
version: 41
version: 40
package: rpm
- linux: el
package_arch: x86_64
Expand Down
2 changes: 2 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@

- [BUGFIX] Increase string length for service_id and id columns in database models to avoid issues with long service names
- [BUGFIX] Fix shenanigans with setup wizard when a reverse proxy was already configured
- [LINUX] Support Fedora 40 back and temporarily put aside Fedora 41 (there are issues when building the images)
- [UI] Add `CHECK_PRIVATE_IP` configuration to manage session IP address changes for private networks
- [UI] Implement `ALWAYS_REMEMBER` functionality for session persistence in login
- [UI] Add temporary UI service to show errors that occurred if any while web UI was starting up
Expand All @@ -12,6 +13,7 @@
- [FEATURE] Add country tracking to bans data
- [FEATURE] Refactored the way the database migrations are handled to make it more reliable and faster using alembic
- [DEPRECATION] Remove `X-XSS-Protection` header from the `header` plugin as it is deprecated
- [DEPS] Updated coreruleset-v4 version to v4.10.0

## v1.6.0-beta - 2024/12/10

Expand Down
5 changes: 3 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -298,7 +298,8 @@ List of supported Linux distros :
- Debian 12 "Bookworm"
- Ubuntu 22.04 "Noble"
- Ubuntu 24.04 "Jammy"
- Fedora 41
- Fedora 40
- Fedora 41 (to be released)
- RHEL 8.9
- RHEL 9.4

Expand Down Expand Up @@ -375,7 +376,7 @@ Here is the list of "official" plugins that we maintain (see the [bunkerweb-plug
| **Discord** | 1.6 | Send security notifications to a Discord channel using a Webhook. | [bunkerweb-plugins/discord](https://github.com/bunkerity/bunkerweb-plugins/tree/main/discord) |
| **Slack** | 1.6 | Send security notifications to a Slack channel using a Webhook. | [bunkerweb-plugins/slack](https://github.com/bunkerity/bunkerweb-plugins/tree/main/slack) |
| **VirusTotal** | 1.6 | Automatically scans uploaded files with the VirusTotal API and denies the request when a file is detected as malicious. | [bunkerweb-plugins/virustotal](https://github.com/bunkerity/bunkerweb-plugins/tree/main/virustotal) |
| **WebHook** | 1.6 | Send security notifications to a custom HTTP endpoint using a Webhook. | [bunkerweb-plugins/webhook](https://github.com/bunkerity/bunkerweb-plugins/tree/main/webhook) |
| **WebHook** | 1.6 | Send security notifications to a custom HTTP endpoint using a Webhook. | [bunkerweb-plugins/webhook](https://github.com/bunkerity/bunkerweb-plugins/tree/main/webhook) |

You will find more information in the [plugins section](https://docs.bunkerweb.io/1.6.0-rc1/plugins/?utm_campaign=self&utm_source=github) of the documentation.

Expand Down
3 changes: 2 additions & 1 deletion docs/integrations.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -323,7 +323,8 @@ Supported Linux distributions for BunkerWeb (amd64/x86_64 and arm64/aarch64 arch
- Debian 12 "Bookworm"
- Ubuntu 22.04 "Jammy"
- Ubuntu 24.04 "Noble"
- Fedora 41
- Fedora 40
- Fedora 41 (to be released)
- Red Hat Enterprise Linux (RHEL) 8.9
- Red Hat Enterprise Linux (RHEL) 9.4

Expand Down
2 changes: 1 addition & 1 deletion docs/security-tuning.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -252,7 +252,7 @@ ModSecurity is integrated and enabled by default alongside the OWASP Core Rule S
You can choose between the following versions of the OWASP Core Rule Set :

- **3** : The version [v3.3.7](https://github.com/coreruleset/coreruleset/releases/tag/v3.3.7) of the OWASP Core Rule Set
- **4** : The version [v4.9.0](https://github.com/coreruleset/coreruleset/releases/tag/v4.9.0) of the OWASP Core Rule Set (***default***)
- **4** : The version [v4.10.0](https://github.com/coreruleset/coreruleset/releases/tag/v4.10.0) of the OWASP Core Rule Set (***default***)
- **nightly** : The latest [nightly](https://github.com/coreruleset/coreruleset/releases/tag/nightly) build of the OWASP Core Rule Set which is updated every day

!!! example "OWASP Core Rule Set's nightly build"
Expand Down
14 changes: 14 additions & 0 deletions src/common/core/modsecurity/files/coreruleset-v4/CHANGES.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,20 @@
or the CRS Google Group at
* https://groups.google.com/a/owasp.org/g/modsecurity-core-rule-set-project

## Version 4.11.0 - TBD

## Version 4.10.0 - 2024-12-29

## What's Changed
### 🆕 New features and detections 🎉
* feat: block CVE-2023-5003 by @azurit in https://github.com/coreruleset/coreruleset/pull/3955
* feat: prevent accessing PHP variables by @azurit in https://github.com/coreruleset/coreruleset/pull/3965
### 🧰 Other Changes
* fix: FP against `pattern` with `=` following at arbitrary position by @theseion in https://github.com/coreruleset/coreruleset/pull/3963


**Full Changelog**: https://github.com/coreruleset/coreruleset/compare/v4.9.0...v4.10.0

## Version 4.9.0 - 2024-11-29

## What's Changed
Expand Down
2 changes: 1 addition & 1 deletion src/common/core/modsecurity/files/coreruleset-v4/CONTRIBUTORS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,13 @@

## Project Co-Leads:

- [Christian Folini](https://github.com/dune73)
- [Felipe Zipitría](https://github.com/fzipi)

## Developers:

- [Franziska Bühler](https://github.com/franbuehler)
- [Esad Cetiner](https://github.com/esadcetiner)
- [Christian Folini](https://github.com/dune73)
- [Ervin Hegedus](https://github.com/airween)
- [Andrew Howe](https://github.com/RedXanadu)
- [Max Leske](https://github.com/theseion)
Expand Down
13 changes: 3 additions & 10 deletions src/common/core/modsecurity/files/coreruleset-v4/SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,16 +11,9 @@ Along those lines, OWASP CRS team may not issue security notifications for unsup

| Version | Supported |
| --------- | ------------------ |
| 4.9.x | :white_check_mark: |
| 4.8.x | :white_check_mark: |
| 4.7.x | :x: |
| 4.6.x | :x: |
| 4.5.x | :x: |
| 4.4.x | :x: |
| 4.3.x | :x: |
| 4.2.x | :x: |
| 4.1.x | :x: |
| 4.0.x | :x: |
| 4.10.z | :white_check_mark: |
| 4.9.z | :white_check_mark: |
| 4.y.z | :x: |
| 3.3.x | :white_check_mark: |
| 3.2.x | :x: |
| 3.1.x | :x: |
Expand Down
21 changes: 10 additions & 11 deletions src/common/core/modsecurity/files/coreruleset-v4/regex-assembly/941130.ra
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,15 +3,14 @@

##!+ i
##!^ .
##!$ \b

\bxlink:href
\bxhtml
\bxmlns
!ENTITY\s+(?:\S+|%\s+\S+)\s+SYSTEM
!ENTITY\s+(?:\S+|%\s+\S+)\s+PUBLIC
\bdata:text/html
\bformaction
@import
;base64
\bpattern\b.*?=
\bxlink:href\b
\bxhtml\b
\bxmlns\b
!ENTITY\s+(?:\S+|%\s+\S+)\s+SYSTEM\b
!ENTITY\s+(?:\S+|%\s+\S+)\s+PUBLIC\b
\bdata:text/html\b
\bformaction\b
@import\b
;base64\b
\bpattern\s*=
2 changes: 1 addition & 1 deletion ...odsecurity/files/coreruleset-v4/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# ------------------------------------------------------------------------
# OWASP CRS ver.4.9.0
# OWASP CRS ver.4.10.0
# Copyright (c) 2006-2020 Trustwave and contributors. All rights reserved.
# Copyright (c) 2021-2024 CRS project. All rights reserved.
#
Expand Down
Loading
Loading