Linux workstation

openSUSE Tumbleweed native package

owasp-modsecurity-crs

OWASP ModSecurity Common Rule Set (CRS)

Packages / openSUSE Tumbleweed / Productivity/Networking/Security / owasp-modsecurity-crs

[Source: owasp-modsecurity-crs]

Package: owasp-modsecurity-crs (4.29.0-1.1)

External Resources:

Homepage: [coreruleset.org]

Similar packages:

OWASP ModSecurity Common Rule Set (CRS)

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

Download owasp-modsecurity-crs

ArchitecturePackage SizeInstalled SizeFiles
noarch271 KiB1.1 MiB[list of files]

Package file paths (62)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/share/doc/packages/owasp-modsecurity-crs
  • /usr/share/doc/packages/owasp-modsecurity-crs/CHANGES.md
  • /usr/share/doc/packages/owasp-modsecurity-crs/CONTRIBUTING.md
  • /usr/share/doc/packages/owasp-modsecurity-crs/KNOWN_BUGS.md
  • /usr/share/doc/packages/owasp-modsecurity-crs/README.md
  • /usr/share/doc/packages/owasp-modsecurity-crs/README.SUSE
  • /usr/share/doc/packages/owasp-modsecurity-crs/SECURITY.md
  • /usr/share/doc/packages/owasp-modsecurity-crs/SPONSORS.md
  • /usr/share/licenses/owasp-modsecurity-crs
  • /usr/share/licenses/owasp-modsecurity-crs/LICENSE
  • /usr/share/owasp-modsecurity-crs
  • /usr/share/owasp-modsecurity-crs/rules
  • /usr/share/owasp-modsecurity-crs/rules/ai-critical-artifacts.data
  • /usr/share/owasp-modsecurity-crs/rules/asp-dotnet-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/iis-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/java-classes.data
  • /usr/share/owasp-modsecurity-crs/rules/lfi-os-files.data
  • /usr/share/owasp-modsecurity-crs/rules/php-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/php-function-names-933150.data
  • /usr/share/owasp-modsecurity-crs/rules/php-variables.data
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-900-EXCLUSION-RULES-BEFORE-CRS.conf.example
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-901-INITIALIZATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-905-COMMON-EXCEPTIONS.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-911-METHOD-ENFORCEMENT.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-913-SCANNER-DETECTION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-921-PROTOCOL-ATTACK.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-922-MULTIPART-ATTACK.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-931-APPLICATION-ATTACK-RFI.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-933-APPLICATION-ATTACK-PHP.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-934-APPLICATION-ATTACK-GENERIC.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-941-APPLICATION-ATTACK-XSS.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-944-APPLICATION-ATTACK-JAVA.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/REQUEST-999-COMMON-EXCEPTIONS-AFTER.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-950-DATA-LEAKAGES.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-951-DATA-LEAKAGES-SQL.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-952-DATA-LEAKAGES-JAVA.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-953-DATA-LEAKAGES-PHP.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-954-DATA-LEAKAGES-IIS.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-955-WEB-SHELLS.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-956-DATA-LEAKAGES-RUBY.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-959-BLOCKING-EVALUATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-980-CORRELATION.conf
  • /usr/share/owasp-modsecurity-crs/rules/RESPONSE-999-EXCLUSION-RULES-AFTER-CRS.conf.example
  • /usr/share/owasp-modsecurity-crs/rules/restricted-files.data
  • /usr/share/owasp-modsecurity-crs/rules/restricted-upload.data
  • /usr/share/owasp-modsecurity-crs/rules/ruby-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/scanners-user-agents.data
  • /usr/share/owasp-modsecurity-crs/rules/sql-errors.data
  • /usr/share/owasp-modsecurity-crs/rules/ssrf.data
  • /usr/share/owasp-modsecurity-crs/rules/ssrf-no-scheme.data
  • /usr/share/owasp-modsecurity-crs/rules/unix-shell-aliases.data
  • /usr/share/owasp-modsecurity-crs/rules/unix-shell-builtins.data
  • /usr/share/owasp-modsecurity-crs/rules/unix-shell.data
  • /usr/share/owasp-modsecurity-crs/rules/web-shells-asp.data
  • /usr/share/owasp-modsecurity-crs/rules/web-shells-php.data
  • /usr/share/owasp-modsecurity-crs/rules/windows-powershell-commands.data

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browserBuild an image that includes owasp-modsecurity-crs

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
4.29.0-1.1tumbleweed / ossnoarchopenSUSE Tumbleweed · OSS · multi-architecture271 KiB1.1 MiBnoarch/owasp-modsecurity-crs-4.29.0-1.1.noarch.rpm

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • openSUSE Tumbleweed OSSSep 1, 2026

    Authoritative source; repository metadata signature verified, revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified