diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3019d2ec..70889e3d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -28,6 +28,7 @@ The **patch** part changes incrementally at each release.
 * mysql: restart service if systemd unit has been patched
 
 ### Fixed
+* packweb-apache: mod-security config is already included elsewhere
 * redis: for permissions on log and lib directories
 * redis: fix shell for instance users
 
diff --git a/packweb-apache/files/evolinux-modsec.conf b/packweb-apache/files/evolinux-modsec.conf
index fcb4ba19..4cc0c777 100644
--- a/packweb-apache/files/evolinux-modsec.conf
+++ b/packweb-apache/files/evolinux-modsec.conf
@@ -39,9 +39,6 @@ SecTmpDir /tmp
 # RULES
 #########
 
-Include /usr/share/modsecurity-crs/owasp-crs.load
-
-
 # Removed because it does not play well with apache-itk
 # Can be removed when modsecurity 2.9.3 hits debian
 # See https://github.com/SpiderLabs/ModSecurity/issues/712