Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2026:0139

HIGH7.1

Red Hat Security Advisory: httpd security update

Published Jan 7, 2026

Modified 6 days ago

Fix available

Affected Packages

Red Hat:rhel_e4s:9.2::appstreamhttpd

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-core

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-core-debuginfo

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-debuginfo

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-debugsource

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-devel

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-filesystem

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-manual

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-tools

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreamhttpd-tools-debuginfo

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_ldap

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_ldap-debuginfo

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_lua

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_lua-debuginfo

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_proxy_html

Fixed in:

1:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_proxy_html-debuginfo

Fixed in:

1:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_session

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_session-debuginfo

Fixed in:

0:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_ssl

Fixed in:

1:2.4.53-11.el9_2.14

Red Hat:rhel_e4s:9.2::appstreammod_ssl-debuginfo

Fixed in:

1:2.4.53-11.el9_2.14

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0139 REPORThttps://access.redhat.com/security/cve/CVE-2025-58098 ARTICLEhttps://access.redhat.com/security/updates/classification/#important REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2419365 ARTICLEhttps://httpd.apache.org/security/vulnerabilities_24.html ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-58098 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0139.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-58098

CVSS Analysis

CVSS v3.1

7.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

LowA:L

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Upstream

CVE-2025-58098

Ecosystems

Red Hat rhel_e4s 9.2 appstream

Timeline

PublishedJan 7, 2026

ModifiedJan 8, 2026

RHSA-2026:0139 | Mondoo Vulnerability Intelligence