RLSA-2025:23732

Security

Mirrored from RHSA-2025:23732

Issued at: 2025-12-22

Updated at: 2025-12-29

Synopsis

Important: httpd:2.4 security update

Description

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)

* mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)

* httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)

* httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64

Rocky Linux 8 x86_64

Fixes

2419139

2419140

2419262

2419365

CVEs

CVE-2025-55753

CVE-2025-58098

CVE-2025-65082

CVE-2025-66200

Affected packages

Rocky Linux 8 aarch64 - AppStream

mod_ldap-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

mod_ldap-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.src.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.src.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4.src.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4.aarch64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4.aarch64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

httpd-filesystem-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.noarch.rpm

httpd-filesystem-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.noarch.rpm

httpd-filesystem-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.noarch.rpm

httpd-filesystem-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.noarch.rpm

httpd-filesystem-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.noarch.rpm

httpd-filesystem-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.noarch.rpm

httpd-filesystem-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.noarch.rpm

httpd-manual-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.noarch.rpm

httpd-manual-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.noarch.rpm

httpd-manual-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.noarch.rpm

httpd-manual-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.noarch.rpm

httpd-manual-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.noarch.rpm

httpd-manual-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.noarch.rpm

httpd-manual-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.noarch.rpm

httpd-tools-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

httpd-tools-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

httpd-tools-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

httpd-tools-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

httpd-tools-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

httpd-tools-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

httpd-tools-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.aarch64.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.src.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.src.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.src.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.src.rpm

mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm

mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

httpd-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.src.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

httpd-filesystem-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.noarch.rpm

httpd-manual-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.noarch.rpm

httpd-tools-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

httpd-tools-debuginfo-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_ldap-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_md-1:2.0.8-8.module+el8.10.0+40053+5a18018e.2.aarch64.rpm

mod_md-1:2.0.8-8.module+el8.10.0+40053+5a18018e.2.src.rpm

mod_md-debuginfo-1:2.0.8-8.module+el8.10.0+40053+5a18018e.2.aarch64.rpm

mod_md-debugsource-1:2.0.8-8.module+el8.10.0+40053+5a18018e.2.aarch64.rpm

mod_proxy_html-1:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_session-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_ssl-1:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+40053+5a18018e.7.aarch64.rpm

mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm

mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1883+38ed6c58.1.aarch64.rpm

mod_ldap-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

mod_ldap-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_ldap-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_ldap-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

mod_ldap-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

mod_ldap-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm

mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.src.rpm

mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm

mod_md-debugsource-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm

mod_proxy_html-1:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

mod_proxy_html-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

mod_proxy_html-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_proxy_html-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_proxy_html-1:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_proxy_html-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

mod_proxy_html-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

mod_proxy_html-debuginfo-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_session-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

mod_session-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_session-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

mod_session-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

mod_session-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_session-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_session-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

mod_session-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

mod_ssl-1:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_ssl-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_ssl-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_ssl-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

mod_ssl-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

mod_ssl-1:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

mod_ssl-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm

mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm

mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm

mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1984+1bed3124.4.aarch64.rpm

mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.aarch64.rpm

mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.aarch64.rpm

mod_ssl-debuginfo-1:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

httpd-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm

httpd-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.x86_64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4.src.rpm

httpd-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.x86_64.rpm

httpd-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm

mod_http2-0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4.x86_64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.x86_64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm

mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4.x86_64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.x86_64.rpm

httpd-debuginfo-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm

mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+2061+8d03fdec.4.x86_64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.x86_64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm

httpd-debugsource-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.x86_64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1830+22f0c9e0.x86_64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1842+4a9649e8.2.x86_64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1840+b070a976.1.x86_64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+2061+8d03fdec.5.x86_64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1984+1bed3124.4.x86_64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+40045+6ce8579b.6.x86_64.rpm

httpd-devel-0:2.4.37-65.module+el8.10.0+1938+3b7755d4.3.x86_64.rpm