#1003868 libapache2-mod-security2: Threads stuck in Logging state

Package:
libapache2-mod-security2
Source:
modsecurity-apache
Description:
Tighten web applications security for Apache
Submitter:
Robin Koch
Date:
2023-10-17 14:45:04 UTC
Severity:
normal
Tags:
#1003868#5
Date:
2022-01-17 09:35:33 UTC
From:
To:
Dear Maintainer,

We are using Apache2 mpm_event and under high load we see a lot of error messages from modsecurity that look like this:
ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "1.2.3.4_3d0740369120b3ec6f500b2539b7d0aa268882b8"): Internal error (specific information not available)
and also hundreds of apache threads that are stuck in the "Logging" state. This bug was fixed upstream: https://github.com/SpiderLabs/ModSecurity/issues/576
In order to activate the fix one has to add --enable-collection-global-lock to the configure options.
We already built our own package package from the deb-src with this option added and can confirm that it works, without the need to change any other configuration.
It would be nice to have this option added in future releases of the package.

Best Regards
Robin Koch
#1003868#10
Date:
2023-09-29 13:34:55 UTC
From:
To:
Best,
Albert van der Veen
#1003868#15
Date:
2023-10-17 14:36:25 UTC
From:
To:
tags 1003868 + pending
thanks

Hi, the configure option will be added in the next upload.
Sorry Albert, old releases aren't built with it.

Regards,

Alberto