RLSA-2025:15123

Synopsis

Moderate: httpd:2.4 security update

Description

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252)

* httpd: mod_ssl: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048)

* httpd: mod_proxy_http2: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module (CVE-2025-49630)

* httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2374571 2374576 2374578 2374580

CVEs

CVE-2024-47252 CVE-2025-23048 CVE-2025-49630 CVE-2025-49812

Affected packages

Rocky Linux 8 aarch64 - AppStream

httpd-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm httpd-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm httpd-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm httpd-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm httpd-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm httpd-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.src.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.noarch.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.noarch.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.noarch.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.noarch.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.noarch.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.aarch64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.src.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.src.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.src.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.src.rpm mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.aarch64.rpm mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.aarch64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.src.rpm mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm mod_md-debugsource-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

httpd-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.src.rpm httpd-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm httpd-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm httpd-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm httpd-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm httpd-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm httpd-debugsource-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm httpd-devel-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.noarch.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.noarch.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.noarch.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.noarch.rpm httpd-filesystem-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.noarch.rpm httpd-manual-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.noarch.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm httpd-tools-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.src.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.src.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.src.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.src.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.x86_64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm mod_http2-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.x86_64.rpm mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.x86_64.rpm mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm mod_ldap-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.src.rpm mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.x86_64.rpm mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.x86_64.rpm mod_md-debugsource-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.x86_64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm mod_proxy_html-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm mod_session-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_ssl-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm