March monthly meeting agenda

[csanders-git]

• Adding modsecurity v3 support to testing env
• REQUEST-944-APPLICATION-ATTACK-JAVA.conf #990 java attacks
• CRS Summit in AppSec EU?
• FP 942360: resolves issue #997 and #988 #1013 FP resolution
• Bugfixes and reorg nextcloud rule exclusions #1010 Nextcloud
• REQUEST-914-FILE-DETECTION #994 File detection
• added regression test for 942490 #989 regression test fixes
• remaining @azhao155 issues
• Command substitution backquoted version support #896 command injection update.
• CRS 3.1 release date.
• Upgrades to how we handle tickets
• GeoIP legacy format reaching EOL

[spartantri]

#990 java attacks

[ffichter]

Support for the new MaxMind format? Since the GeoLite Legacy databases updates are discontinued as of April 1, 2018 (https://dev.maxmind.com/geoip/geoip2/geolite2/)

[dune73]

I agree with @ffichter this is a hard problem. It's one that ModSecurity needs to solve though. But given the size of the problem we should at least discuss a position for the project that we write down for our users.

[fzipi]

CRS Summit in AppSec EU?