SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-4518

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-4518

Security update for apache2

Type: security

Severity: important

Issued: 2025-12-23

Description:

This update for apache2 fixes the following issues:

- CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511)
- CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514)
- CVE-2025-58098: Fixed Server Side Includes adding query string to #exec cmd=... (bsc#1254512)
- CVE-2025-66200: Fixed mod_userdir+suexec bypass via AllowOverride FileInfo (bsc#1254515)

References

CVE: CVE-2025-66200
CVE: CVE-2025-65082
CVE: CVE-2025-58098
CVE: CVE-2025-55753
Bugzilla: 1254515 VUL-0: CVE-2025-66200: apache2: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo
Bugzilla: 1254514 VUL-0: CVE-2025-65082: apache2: Apache HTTP Server: CGI environment variable override
Bugzilla: 1254512 VUL-0: CVE-2025-58098: apache2: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...
Bugzilla: 1254511 VUL-0: CVE-2025-55753: apache2: Apache HTTP Server: mod_md (ACME), unintended retry intervals

Packages

apache2-event-2.4.62-150700.4.9.1