FYI - OWASP CRS 4.25.0 LTS Released

[Starburst-Admin]

FYI - The OWASP CRS Ruleset v4.25.0 LTS has been published (2026-03-28)

[overseer]

In the owasp.conf file, /usr/local/apache/modsecurity-rules/owasp.conf, I have omitted the version numbers, so it saves a step in your instructions, since that file stays the same between versions:

Code: Select all

Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset/crs-setup.conf
Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset/rules/*.conf

So the updated instructions look like this:

Code: Select all

cd /usr/local/apache/modsecurity-rules/owasp-crs
wget https://github.com/coreruleset/coreruleset/releases/download/v4.25.0/coreruleset-4.25.0-minimal.tar.gz
tar -xvf coreruleset-4.25.0-minimal.tar.gz
rm -f coreruleset-4.25.0-minimal.tar.gz
mv coreruleset-4.25.0 coreruleset
cp coreruleset/crs-setup.conf.example coreruleset/crs-setup.conf
systemctl restart httpd