RLSA-2025:23919

Synopsis

Important: httpd security update

Description

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)

* httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)

* httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2419139 2419262 2419365

CVEs

CVE-2025-58098 CVE-2025-65082 CVE-2025-66200

Affected packages

Rocky Linux 9 aarch64 - AppStream

mod_ldap-0:2.4.62-7.el9_7.3.aarch64.rpm mod_ldap-debuginfo-0:2.4.62-7.el9_7.3.aarch64.rpm mod_lua-0:2.4.62-7.el9_7.3.aarch64.rpm mod_lua-debuginfo-0:2.4.62-7.el9_7.3.aarch64.rpm mod_proxy_html-1:2.4.62-7.el9_7.3.aarch64.rpm httpd-0:2.4.62-7.el9_7.3.aarch64.rpm httpd-0:2.4.62-7.el9_7.3.src.rpm httpd-core-0:2.4.62-7.el9_7.3.aarch64.rpm httpd-core-debuginfo-0:2.4.62-7.el9_7.3.aarch64.rpm httpd-debuginfo-0:2.4.62-7.el9_7.3.aarch64.rpm httpd-debugsource-0:2.4.62-7.el9_7.3.aarch64.rpm httpd-devel-0:2.4.62-7.el9_7.3.aarch64.rpm httpd-filesystem-0:2.4.62-7.el9_7.3.noarch.rpm httpd-manual-0:2.4.62-7.el9_7.3.noarch.rpm httpd-tools-0:2.4.62-7.el9_7.3.aarch64.rpm httpd-tools-debuginfo-0:2.4.62-7.el9_7.3.aarch64.rpm mod_proxy_html-debuginfo-1:2.4.62-7.el9_7.3.aarch64.rpm mod_session-0:2.4.62-7.el9_7.3.aarch64.rpm mod_session-debuginfo-0:2.4.62-7.el9_7.3.aarch64.rpm mod_ssl-1:2.4.62-7.el9_7.3.aarch64.rpm mod_ssl-debuginfo-1:2.4.62-7.el9_7.3.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

mod_ldap-0:2.4.62-7.el9_7.3.ppc64le.rpm mod_ldap-debuginfo-0:2.4.62-7.el9_7.3.ppc64le.rpm mod_lua-0:2.4.62-7.el9_7.3.ppc64le.rpm mod_lua-debuginfo-0:2.4.62-7.el9_7.3.ppc64le.rpm mod_proxy_html-1:2.4.62-7.el9_7.3.ppc64le.rpm httpd-0:2.4.62-7.el9_7.3.ppc64le.rpm httpd-0:2.4.62-7.el9_7.3.src.rpm httpd-core-0:2.4.62-7.el9_7.3.ppc64le.rpm httpd-core-debuginfo-0:2.4.62-7.el9_7.3.ppc64le.rpm httpd-debuginfo-0:2.4.62-7.el9_7.3.ppc64le.rpm httpd-debugsource-0:2.4.62-7.el9_7.3.ppc64le.rpm httpd-devel-0:2.4.62-7.el9_7.3.ppc64le.rpm httpd-filesystem-0:2.4.62-7.el9_7.3.noarch.rpm httpd-manual-0:2.4.62-7.el9_7.3.noarch.rpm httpd-tools-0:2.4.62-7.el9_7.3.ppc64le.rpm httpd-tools-debuginfo-0:2.4.62-7.el9_7.3.ppc64le.rpm mod_proxy_html-debuginfo-1:2.4.62-7.el9_7.3.ppc64le.rpm mod_session-0:2.4.62-7.el9_7.3.ppc64le.rpm mod_session-debuginfo-0:2.4.62-7.el9_7.3.ppc64le.rpm mod_ssl-1:2.4.62-7.el9_7.3.ppc64le.rpm mod_ssl-debuginfo-1:2.4.62-7.el9_7.3.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

mod_ldap-0:2.4.62-7.el9_7.3.s390x.rpm mod_ldap-debuginfo-0:2.4.62-7.el9_7.3.s390x.rpm mod_lua-0:2.4.62-7.el9_7.3.s390x.rpm mod_lua-debuginfo-0:2.4.62-7.el9_7.3.s390x.rpm mod_proxy_html-1:2.4.62-7.el9_7.3.s390x.rpm httpd-0:2.4.62-7.el9_7.3.s390x.rpm httpd-0:2.4.62-7.el9_7.3.src.rpm httpd-core-0:2.4.62-7.el9_7.3.s390x.rpm httpd-core-debuginfo-0:2.4.62-7.el9_7.3.s390x.rpm httpd-debuginfo-0:2.4.62-7.el9_7.3.s390x.rpm httpd-debugsource-0:2.4.62-7.el9_7.3.s390x.rpm httpd-devel-0:2.4.62-7.el9_7.3.s390x.rpm httpd-filesystem-0:2.4.62-7.el9_7.3.noarch.rpm httpd-manual-0:2.4.62-7.el9_7.3.noarch.rpm httpd-tools-0:2.4.62-7.el9_7.3.s390x.rpm httpd-tools-debuginfo-0:2.4.62-7.el9_7.3.s390x.rpm mod_proxy_html-debuginfo-1:2.4.62-7.el9_7.3.s390x.rpm mod_session-0:2.4.62-7.el9_7.3.s390x.rpm mod_session-debuginfo-0:2.4.62-7.el9_7.3.s390x.rpm mod_ssl-1:2.4.62-7.el9_7.3.s390x.rpm mod_ssl-debuginfo-1:2.4.62-7.el9_7.3.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

mod_ldap-0:2.4.62-7.el9_7.3.x86_64.rpm mod_ldap-debuginfo-0:2.4.62-7.el9_7.3.x86_64.rpm mod_lua-0:2.4.62-7.el9_7.3.x86_64.rpm mod_lua-debuginfo-0:2.4.62-7.el9_7.3.x86_64.rpm mod_proxy_html-1:2.4.62-7.el9_7.3.x86_64.rpm httpd-0:2.4.62-7.el9_7.3.src.rpm httpd-0:2.4.62-7.el9_7.3.x86_64.rpm httpd-core-0:2.4.62-7.el9_7.3.x86_64.rpm httpd-core-debuginfo-0:2.4.62-7.el9_7.3.x86_64.rpm httpd-debuginfo-0:2.4.62-7.el9_7.3.x86_64.rpm httpd-debugsource-0:2.4.62-7.el9_7.3.x86_64.rpm httpd-devel-0:2.4.62-7.el9_7.3.x86_64.rpm httpd-filesystem-0:2.4.62-7.el9_7.3.noarch.rpm httpd-manual-0:2.4.62-7.el9_7.3.noarch.rpm httpd-tools-0:2.4.62-7.el9_7.3.x86_64.rpm httpd-tools-debuginfo-0:2.4.62-7.el9_7.3.x86_64.rpm mod_proxy_html-debuginfo-1:2.4.62-7.el9_7.3.x86_64.rpm mod_session-0:2.4.62-7.el9_7.3.x86_64.rpm mod_session-debuginfo-0:2.4.62-7.el9_7.3.x86_64.rpm mod_ssl-1:2.4.62-7.el9_7.3.x86_64.rpm mod_ssl-debuginfo-1:2.4.62-7.el9_7.3.x86_64.rpm