OLS 1.8.2 upgrade std::length_error + breaks mod_security

[stevieosaurus]

Opgraded to OLS v1.8.2 (from v1.7.9), Webadmin works however all my sites get blocked and I encounter 2 (new) issues:

1. the stderr.log gives the following error (same one), every 5 minutes:

2024-09-15 09:31:23.840 [STDERR] terminate called after throwing an instance of 'std::length_error'
what(): basic_string::resize

2. mod_security now blocks EVERYTHING (browser returns code 301 - moved permanently).
When I disable mod_security as a module, my websites run again perfectly.
modsec_debug.log has only lvl 4 & lvl 9 entries, so no errors recorded.
No settings have been changed from v1.7.9, which ran perfectly with the current (same) mod_security module enabled, same filter file.

From the debug log all actions seem to show a pass:

[/] [4] Running (disruptive) action: pass.

Please help, any suggestions? (modsec_debug.log attached)

---------------------------------
OS: AlmaLinux v9.4 x64
PLATFORM_ID="platform:el9"

 

[Cold-Egg]

Thanks for the report, I will forward it to the dev team.

 

[stevieosaurus]

I also wrote to the ModSecurity dev team on Github: https://github.com/owasp-modsecurity/ModSecurity/issues/3259

 

[Cold-Egg]

Thanks. The OLS development team discovered that ModSecurity made some changes. They should be able to address the ModSecurity loading issue this week.