Question Versions of ModSecurity Extension

[Azurel]

Plesk Onyx Version 17.5.3 use ModSecurity 2.9.2-1.el7 (Info from june 2018). Now I have updated to Onyx 17.8.11 and this use a older version 2.9.1-33.el7.art?

The changelog said Change Log for Plesk (Onyx 17.8.11 Update 1) Updated ModSecurity to version 2.9.2.

Which version use coming Onyx 17.9? I can't find this info in changelog. I ask, because version 2.9 have a issue with "MULTIPART_UNMATCHED_BOUNDARY" and upload images, that fixed in ModSecurity 3.x.

 

[IgorG]

Now I have updated to Onyx 17.8.11 and this use a older version 2.9.1-33.el7.art?

art means that this package is from Atomic repository. looks like that they have outdated version in their repository.
On Plesk 17.9 I see:

# rpm -qa | grep mod_secur
mod_security-2.9.2-1.el7.x86_64

# plesk version
Product version: Plesk Onyx 17.9.8
Build date: 2018/11/09 16:00
OS version: CentOS 7.2.1511

There is the version from official CentOS repository.

 

[Azurel]

Thanks for your reply. Is there any roadmap to upgrade modsecurity to version 3.x? Security is a important task, but I can't enable modsecurity because version 2.9 not working for my needs. So I hope for modsecurity version 3.x in onyx 17.9.

 

[IgorG]

Yes, we have corresponding plans for implementing ModSecurity v3.x but at the moment I have no any ETA.

 

[Azurel]

Thanks for this information.