# modsecurity-apache security updates

Patch Radar has 24 security fixes for modsecurity-apache, closing 7 CVEs. The newest is DLA-4294-1 (2.9.3-3+deb11u5), released September 7, 2025.

- Web page: https://patchblox.com/security/product/linux/modsecurity-apache
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DLA-4294-1](https://patchblox.com/security/data/fix/linux/dla-4294-1.md) | Sep 7, 2025 | Debian 11.6 (bullseye) 2.9.3-3+deb11u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-54571](https://patchblox.com/security/data/fix/linux/debian-cve-2025-54571.md) | Aug 6, 2025 | Debian 12.15 (bookworm) 2.9.7-1+deb12u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-54571](https://patchblox.com/security/data/fix/linux/debian-cve-2025-54571.md) | Aug 6, 2025 | Debian 13.5 (trixie) 2.9.11-1+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-54571](https://patchblox.com/security/data/fix/linux/debian-cve-2025-54571.md) | Aug 6, 2025 | Debian 14 2.9.12-2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-52891](https://patchblox.com/security/data/fix/linux/debian-cve-2025-52891.md) | Jul 2, 2025 | Debian 13.5 (trixie) 2.9.11-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-52891](https://patchblox.com/security/data/fix/linux/debian-cve-2025-52891.md) | Jul 2, 2025 | Debian 14 2.9.11-1 | Routine | 1 | 0 |
| [DLA-4212-1](https://patchblox.com/security/data/fix/linux/dla-4212-1.md) | Jun 9, 2025 | Debian 11.6 (bullseye) 2.9.3-3+deb11u4 | High | 1 | 0 |
| [DSA-5940-1](https://patchblox.com/security/data/fix/linux/dsa-5940-1.md) | Jun 8, 2025 | Debian 12.15 (bookworm) 2.9.7-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-48866](https://patchblox.com/security/data/fix/linux/debian-cve-2025-48866.md) | Jun 2, 2025 | Debian 12.15 (bookworm) 2.9.7-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-48866](https://patchblox.com/security/data/fix/linux/debian-cve-2025-48866.md) | Jun 2, 2025 | Debian 13.5 (trixie) 2.9.10-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-48866](https://patchblox.com/security/data/fix/linux/debian-cve-2025-48866.md) | Jun 2, 2025 | Debian 14 2.9.10-1 | High | 1 | 0 |
| [DLA-4192-1](https://patchblox.com/security/data/fix/linux/dla-4192-1.md) | May 29, 2025 | Debian 11.6 (bullseye) 2.9.3-3+deb11u3 | High | 1 | 0 |
| [DEBIAN-CVE-2025-47947](https://patchblox.com/security/data/fix/linux/debian-cve-2025-47947.md) | May 21, 2025 | Debian 13.5 (trixie) 2.9.9-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-47947](https://patchblox.com/security/data/fix/linux/debian-cve-2025-47947.md) | May 21, 2025 | Debian 14 2.9.9-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-24021](https://patchblox.com/security/data/fix/linux/debian-cve-2023-24021.md) | Jan 20, 2023 | Debian 12.15 (bookworm) 2.9.7-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-24021](https://patchblox.com/security/data/fix/linux/debian-cve-2023-24021.md) | Jan 20, 2023 | Debian 13.5 (trixie) 2.9.7-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-24021](https://patchblox.com/security/data/fix/linux/debian-cve-2023-24021.md) | Jan 20, 2023 | Debian 14 2.9.7-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-48279](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48279.md) | Jan 20, 2023 | Debian 12.15 (bookworm) 2.9.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-48279](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48279.md) | Jan 20, 2023 | Debian 13.5 (trixie) 2.9.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-48279](https://patchblox.com/security/data/fix/linux/debian-cve-2022-48279.md) | Jan 20, 2023 | Debian 14 2.9.6-1 | High | 1 | 0 |
| [DSA-5023-1](https://patchblox.com/security/data/fix/linux/dsa-5023-1.md) | Dec 18, 2021 | Debian 11.6 (bullseye) 2.9.3-3+deb11u1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-42717](https://patchblox.com/security/data/fix/linux/debian-cve-2021-42717.md) | Dec 7, 2021 | Debian 12.15 (bookworm) 2.9.5-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-42717](https://patchblox.com/security/data/fix/linux/debian-cve-2021-42717.md) | Dec 7, 2021 | Debian 13.5 (trixie) 2.9.5-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-42717](https://patchblox.com/security/data/fix/linux/debian-cve-2021-42717.md) | Dec 7, 2021 | Debian 14 2.9.5-1 | High | 1 | 0 |

---

Data as of 2026-11-06T17:00:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo