High ELSA-2025-23738 1 CVE

Important: mod_md security update (Oracle Linux 10)

Published Dec 21, 2025 · Updated Dec 21, 2025

Ecosystem: Oracle Linux

Summary

[1:2.4.26-4]
- Resolves: RHEL-134483 - httpd: Apache HTTP Server: mod_md (ACME), unintended
retry intervals (CVE-2025-55753)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 10	mod_md	1:2.4.26-4.el10_1

Vulnerabilities 1

High 7.5

CVE-2025-55753

Apache HTTP Server: mod_md (ACME), unintended retry intervals

An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. T…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

Dec 5, 2025