High ELSA-2025-8837 1 CVE

Important: mod_security security update (Oracle Linux 9)

Published Jun 11, 2025 · Updated Jun 11, 2025

Ecosystem: Oracle Linux

Summary

[2.9.6-2]
- add fix for CVE-2025-47947
- Resolves: RHEL-93016

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	mod_security	0:2.9.6-2.el9_6
Oracle Linux · 9	mod_security-mlogc	0:2.9.6-2.el9_6

Vulnerabilities 1

High 7.5

CVE-2025-47947 Public exploit

ModSecurity Has Possible DoS Vulnerability

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content…

owasp-modsecurity ModSecurity modsecurity-apache mod_security Debian Ubuntu Azure Linux

May 21, 2025