Page 1 of 1

FYI - OWASP CRS 4.25.0 LTS Released

Posted: Mon Mar 30, 2026 1:31 pm
by Starburst-Admin
FYI - The OWASP CRS Ruleset v4.25.0 LTS has been published (2026-03-28)

Re: FYI - OWASP CRS 4.25.0 LTS Released

Posted: Fri Apr 03, 2026 2:40 am
by overseer
In the owasp.conf file, /usr/local/apache/modsecurity-rules/owasp.conf, I have omitted the version numbers, so it saves a step in your instructions, since that file stays the same between versions:

Code: Select all

Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset/crs-setup.conf
Include /usr/local/apache/modsecurity-rules/owasp-crs/coreruleset/rules/*.conf
So the updated instructions look like this:

Code: Select all

cd /usr/local/apache/modsecurity-rules/owasp-crs
wget https://github.com/coreruleset/coreruleset/releases/download/v4.25.0/coreruleset-4.25.0-minimal.tar.gz
tar -xvf coreruleset-4.25.0-minimal.tar.gz
rm -f coreruleset-4.25.0-minimal.tar.gz
mv coreruleset-4.25.0 coreruleset
cp coreruleset/crs-setup.conf.example coreruleset/crs-setup.conf
systemctl restart httpd