Hi Alberto, On Tue, May 21, 2019 at 10:15:20AM +0200, Alberto Gonzalez Iniesta wrote: > Hi all, > > I'll try to clarify a bit on ModSecurity vs CRS, since I think it may be > a bit confusing.
Indeed, it's much clearer now with your explanation. I'll update the CVE entries in the Debian security to reflect the negligible security impact, feel free to also lower the BTS severity. Cheers, Moritz