ESSA-2026:0017

csafDEsuse_csaf

Important: httpd security update

view advisory published 2026-01-26

Important: httpd security update

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-58098US—Exploit
Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. T…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • Fixedhttpd-0:2.4.6-99.el7_9.7.x86_64 as component of SUSE Liberty Linux 7 LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedhttpd-devel-0:2.4.6-99.el7_9.7.x86_64 as component of SUSE Liberty Linux 7 LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedhttpd-manual-0:2.4.6-99.el7_9.7.noarch as component of SUSE Liberty Linux 7 LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedhttpd-tools-0:2.4.6-99.el7_9.7.x86_64 as component of SUSE Liberty Linux 7 LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedmod_ldap-0:2.4.6-99.el7_9.7.x86_64 as component of SUSE Liberty Linux 7 LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedmod_proxy_html-1:2.4.6-99.el7_9.7.x86_64 as component of SUSE Liberty Linux 7 LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedmod_session-0:2.4.6-99.el7_9.7.x86_64 as component of SUSE Liberty Linux 7 LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedmod_ssl-1:2.4.6-99.el7_9.7.x86_64 as component of SUSE Liberty Linux 7 LTSS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan