RHSA-2025:23732 — Red Hat Security Advisory: httpd:2.4 security update

Fixed packages 22

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	httpd	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	httpd-debuginfo	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	httpd-debugsource	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	httpd-devel	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	httpd-filesystem	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	httpd-manual	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	httpd-tools	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	httpd-tools-debuginfo	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_http2	0:1.15.7-10.module+el8.10.0+23369+11a81384.4
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_http2-debuginfo	0:1.15.7-10.module+el8.10.0+23369+11a81384.4
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_http2-debugsource	0:1.15.7-10.module+el8.10.0+23369+11a81384.4
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_ldap	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_ldap-debuginfo	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_md	1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_md-debuginfo	1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_md-debugsource	1:2.0.8-8.module+el8.10.0+23815+1b5e1c66.2
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_proxy_html	1:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_proxy_html-debuginfo	1:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_session	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_session-debuginfo	0:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_ssl	1:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7
Red Hat · RHEL 8 enterprise_linux:8::appstream	mod_ssl-debuginfo	1:2.4.37-65.module+el8.10.0+23815+1b5e1c66.7

Vulnerabilities 4

High 8.3

CVE-2025-58098 Public exploit

Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upg…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

Dec 5, 2025
High 7.5

CVE-2025-55753

Apache HTTP Server: mod_md (ACME), unintended retry intervals

An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. T…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

Dec 5, 2025
Medium 6.5

CVE-2025-65082

Apache HTTP Server: CGI environment variable override

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects A…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

Dec 5, 2025
Medium 5.4

CVE-2025-66200

Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo

mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: fro…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine

Dec 5, 2025

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2419139
report
https://bugzilla.redhat.com/show_bug.cgi?id=2419140
report
https://bugzilla.redhat.com/show_bug.cgi?id=2419262
report
https://bugzilla.redhat.com/show_bug.cgi?id=2419365
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23732.json
report
https://access.redhat.com/security/cve/CVE-2025-55753
advisory
https://www.cve.org/CVERecord?id=CVE-2025-55753
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-55753
article
https://httpd.apache.org/security/vulnerabilities_24.html
report
https://access.redhat.com/security/cve/CVE-2025-58098
advisory
https://www.cve.org/CVERecord?id=CVE-2025-58098
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-58098
report
https://access.redhat.com/security/cve/CVE-2025-65082
advisory
https://www.cve.org/CVERecord?id=CVE-2025-65082
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-65082
report
https://access.redhat.com/security/cve/CVE-2025-66200
advisory
https://www.cve.org/CVERecord?id=CVE-2025-66200
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-66200
article
http://www.openwall.com/lists/oss-security/2025/12/04/8

Red Hat Security Advisory: httpd:2.4 security update

Fixed packages 22

Vulnerabilities 4

Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...

Apache HTTP Server: mod_md (ACME), unintended retry intervals

Apache HTTP Server: CGI environment variable override

Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo

References