[<prev] [day] [month] [year] [list]
Message-ID: <f6570ff8-883e-377f-aaa8-e8e06311ef4d@apache.org>
Date: Wed, 23 Jul 2025 12:14:07 +0000
From: Eric Covener <covener@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr' always
evaluates to true in 2.4.64
Severity: moderate
Affected versions:
- Apache HTTP Server 2.4.64
Description:
A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true".
Users are recommended to upgrade to version 2.4.65, which fixes the issue.
References:
https://httpd.apache.org/security/vulnerabilities_24.html
https://httpd.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-54090
Timeline:
2025-07-16: reported
2025-07-23: fixed in 2.4.x by r1927361
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
