RHSA-2025:23732 — Security Advisory

Red Hat Security Advisory: httpd:2.4 security update

Loading…

Severity

Important

Red Hat Product Security

RHEL 8

Products

Official CSAF product identity

Published · December 22, 2025

Updated · October 16, 2026

Topic

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082)
mod_md: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753)
httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200)
httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.