-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 22 Feb 2026 09:39:48 +0100
Source: modsecurity-crs
Architecture: source
Version: 3.3.4-1+deb12u2
Distribution: bookworm
Urgency: medium
Maintainer: Alberto Gonzalez Iniesta <agi@inittab.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1041109
Changes:
 modsecurity-crs (3.3.4-1+deb12u2) bookworm; urgency=medium
 .
   * Non-maintainer upload for the LTS team, targeting o-s-p-u.
   * Backported from upstream 3.3.5:
     - CVE-2023-38199 - WAF bypass (Closes: #1041109)
   * Enable salsa-ci.
   * fix CVE number uploaded in 3.3.4-1+deb12u1: s/CVE-2025-/CVE-2026-/
Checksums-Sha1:
 62e49ef5b5f398b731d5856ac338e1101bcbf9e7 1970 modsecurity-crs_3.3.4-1+deb12u2.dsc
 cc7d6c92e8b3898307a77aeb88ea08d8870358a4 7124 modsecurity-crs_3.3.4-1+deb12u2.debian.tar.xz
 455a9888cb64e913537510d935872fd2213bc1ad 6091 modsecurity-crs_3.3.4-1+deb12u2_amd64.buildinfo
Checksums-Sha256:
 e8a4f9555d128ea3eb3af05b28973e07516ac4d09f20cf70954767f6a6de8644 1970 modsecurity-crs_3.3.4-1+deb12u2.dsc
 f0cc8688093065200777fd0c3b5c96dab6814e9b5e6cca49c637b848e66fc9c6 7124 modsecurity-crs_3.3.4-1+deb12u2.debian.tar.xz
 4d777d4b97dbfc88bddcbdfd1b07d762f5e9478ea86f9494e9afd904be7d0beb 6091 modsecurity-crs_3.3.4-1+deb12u2_amd64.buildinfo
Files:
 79510f541c99c5cde9ccac98f3599648 1970 httpd optional modsecurity-crs_3.3.4-1+deb12u2.dsc
 40ff84c7eeecec4673e17df0a5403d49 7124 httpd optional modsecurity-crs_3.3.4-1+deb12u2.debian.tar.xz
 7b85b6e7f590be79f0e750d579d0379c 6091 httpd optional modsecurity-crs_3.3.4-1+deb12u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=lagd
-----END PGP SIGNATURE-----