ModSecurity: Loaded APR do not match with compiled

[:notice] ModSecurity: APR compiled version=“1.6.3”; loaded version=“1.6.5” [:warn] ModSecurity: Loaded APR do not match with compiled!

cat /var/log/apache2/error.log | grep ModSecurity
[Mon Jul 29 00:00:52.932188 2019] [:notice] [pid 32144] ModSecurity for Apache/2.9.3 (http://www.modsecurity.org/) configured.
[Mon Jul 29 00:00:52.932290 2019] [:notice] [pid 32144] ModSecurity: APR compiled version="1.6.3"; loaded version="1.6.5"
[Mon Jul 29 00:00:52.932296 2019] [:warn] [pid 32144] ModSecurity: Loaded APR do not match with compiled!
[Mon Jul 29 00:00:52.932309 2019] [:notice] [pid 32144] ModSecurity: PCRE compiled version="8.39 "; loaded version="8.39 2016-06-14"
[Mon Jul 29 00:00:52.932313 2019] [:notice] [pid 32144] ModSecurity: LUA compiled version="Lua 5.1"
[Mon Jul 29 00:00:52.932315 2019] [:notice] [pid 32144] ModSecurity: YAJL compiled version="2.1.0"
[Mon Jul 29 00:00:52.932318 2019] [:notice] [pid 32144] ModSecurity: LIBXML compiled version="2.9.4"
[Mon Jul 29 00:00:52.932321 2019] [:notice] [pid 32144] ModSecurity: Status engine is currently disabled, enable it by set SecStatusEngine to On.
[Mon Jul 29 00:07:16.639181 2019] [:notice] [pid 32704] ModSecurity for Apache/2.9.3 (http://www.modsecurity.org/) configured.
[Mon Jul 29 00:07:16.639373 2019] [:notice] [pid 32704] ModSecurity: APR compiled version="1.6.3"; loaded version="1.6.5"
[Mon Jul 29 00:07:16.639381 2019] [:warn] [pid 32704] ModSecurity: Loaded APR do not match with compiled!
[Mon Jul 29 00:07:16.639383 2019] [:notice] [pid 32704] ModSecurity: PCRE compiled version="8.39 "; loaded version="8.39 2016-06-14"
[Mon Jul 29 00:07:16.639385 2019] [:notice] [pid 32704] ModSecurity: LUA compiled version="Lua 5.1"
[Mon Jul 29 00:07:16.639387 2019] [:notice] [pid 32704] ModSecurity: YAJL compiled version="2.1.0"
[Mon Jul 29 00:07:16.639388 2019] [:notice] [pid 32704] ModSecurity: LIBXML compiled version="2.9.4"
[Mon Jul 29 00:07:16.639430 2019] [:notice] [pid 32704] ModSecurity: StatusEngine call: "2.9.3,Apache/2.4.38,1.6.3/1.6.5,8.39/8.39 2016-06-14,Lua 5.1,2.9.4,46"
[Mon Jul 29 00:07:18.225043 2019] [:notice] [pid 32704] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/

I use Debian Stretch

deb http://debian.proxad.net/debian/ stretch main non-free contrib

deb http://deb.debian.org/debian/ sid main contrib non-free
deb http://deb.debian.org/debian/ testing main contrib non-free

deb http://security.debian.org/ buster/updates main contrib non-free
deb-src http://security.debian.org/ buster/updates main contrib non-free

deb http://deb.debian.org/debian/ buster main non-free contrib
deb-src http://deb.debian.org/debian/ buster main non-free contrib

# buster-updates, previously known as 'volatile'
deb http://deb.debian.org/debian/ buster-updates main contrib non-free
deb-src http://deb.debian.org/debian/ buster-updates main contrib non-free

 # Installer le module mod_security :
 sudo apt install libapache2-modsecurity

 Paquets recommandés :
  modsecurity-crs
 Les NOUVEAUX paquets suivants seront installés :
  libapache2-mod-security2 libapache2-modsecurity liblua5.1-0 libyajl2

 # Vérifier que mod_security soit bien chargé par Apache2 :
 sudo apachectl -M | grep --color sec
 # Le module a été chargé ( OK )
 # security2_module (shared)

 sudo cp /etc/modsecurity/modsecurity.conf{-recommended,}

 # Redémarrer Apache :
 sudo systemctl restart apache2

About this issue

Original URL
State: closed
Created 5 years ago
Comments: 33 (16 by maintainers)

Most upvoted comments

Here one can find version the mentioned Debian package 2.9.3-1+b1 compiled against 1.6.5:

http://ftp.debian.org/debian/pool/main/m/modsecurity-apache/libapache2-mod-security2_2.9.3-1+b1_amd64.deb

I mentioned this package here, but this package isn’t part of the Debian 10 (current stable). But may be you can try to grab it and install by manually.

airween on Dec 22, 2019

cat /var/log/apache2/error.log | grep ModSecurity

[Mon Dec 23 05:38:02.363040 2019] [:notice] [pid 21787] ModSecurity for Apache/2.9.3 (http://www.modsecurity.org/) configured.
[Mon Dec 23 05:38:02.363130 2019] [:notice] [pid 21787] ModSecurity: APR compiled version="1.6.3"; loaded version="1.6.5"
[Mon Dec 23 05:38:02.363149 2019] [:warn] [pid 21787] ModSecurity: Loaded APR do not match with compiled!
[Mon Dec 23 05:38:02.363152 2019] [:notice] [pid 21787] ModSecurity: PCRE compiled version="8.39 "; loaded version="8.39 2016-06-14"
[Mon Dec 23 05:38:02.363156 2019] [:notice] [pid 21787] ModSecurity: LUA compiled version="Lua 5.1"
[Mon Dec 23 05:38:02.363159 2019] [:notice] [pid 21787] ModSecurity: YAJL compiled version="2.1.0"
[Mon Dec 23 05:38:02.363161 2019] [:notice] [pid 21787] ModSecurity: LIBXML compiled version="2.9.4"
[Mon Dec 23 05:38:02.363203 2019] [:notice] [pid 21787] ModSecurity: StatusEngine call: "2.9.3,Apache,1.6.3/1.6.5,8.39/8.39 2016-06-14,Lua 5.1,2.9.4,46"
[Mon Dec 23 05:38:03.796152 2019] [:notice] [pid 21787] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/

vs

[Mon Dec 23 18:23:19.069723 2019] [:notice] [pid 16431] ModSecurity for Apache/2.9.3 (http://www.modsecurity.org/) configured.
[Mon Dec 23 18:23:19.069765 2019] [:notice] [pid 16431] ModSecurity: APR compiled version="1.6.5"; loaded version="1.6.5"
[Mon Dec 23 18:23:19.069768 2019] [:notice] [pid 16431] ModSecurity: PCRE compiled version="8.39 "; loaded version="8.39 2016-06-14"
[Mon Dec 23 18:23:19.069771 2019] [:notice] [pid 16431] ModSecurity: LUA compiled version="Lua 5.1"
[Mon Dec 23 18:23:19.069773 2019] [:notice] [pid 16431] ModSecurity: YAJL compiled version="2.1.0"
[Mon Dec 23 18:23:19.069775 2019] [:notice] [pid 16431] ModSecurity: LIBXML compiled version="2.9.4"
[Mon Dec 23 18:23:19.069807 2019] [:notice] [pid 16431] ModSecurity: StatusEngine call: "2.9.3,Apache,1.6.5/1.6.5,8.39/8.39 2016-06-14,Lua 5.1,2.9.4,46"
[Mon Dec 23 18:23:20.755586 2019] [:notice] [pid 16431] ModSecurity: StatusEngine call successfully sent. For more information visit: http://status.modsecurity.org/

Nice !

[:notice] [pid 16431] ModSecurity: APR compiled version="1.6.5"; loaded version="1.6.5"

It’s ok now !

ZerooCool on Dec 23, 2019

Ah, looks like you’ve found a bug in the Debian package - I’ll consult with maintainer of package.

Anyway, I think you can use the package, that’s not a critical issue.

airween on Oct 10, 2019

Right, now try:

sudo apt install libapache2-mod-security2=2.9.3-1+b1

What do you get?

airween on Oct 10, 2019

For the moment, I have not restarted the system. You think that can influence the behavior?

I keep this exchange in the favorites, I come back in the days to come, once the progress of the moment stabilized.

Reboots are scary : D reboot

ZerooCool on Aug 2, 2019

This line is missing:

ldd /usr/lib/apache2/modules/mod_security2.so | grep apr

and what you see in the output near the libapr-1.so.0, next to the =>, that’s the shared object/library, what you have to check with dpkg -S, and dpkg -l.

airween on Jul 31, 2019