SUSE-SU-2026:0020-1

Details

This update for apache2 fixes the following issues:

CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511)
CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514)
CVE-2025-58098: Fixed Server Side Includes adding query string to #exec cmd=... (bsc#1254512)
CVE-2025-66200: Fixed mod_userdir+suexec bypass via AllowOverride FileInfo (bsc#1254515)

Affected Packages

SUSE:Linux Enterprise Server 15 SP6-LTSSapache2

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server 15 SP6-LTSSapache2-devel

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server 15 SP6-LTSSapache2-prefork

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server 15 SP6-LTSSapache2-utils

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server 15 SP6-LTSSapache2-worker

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP6apache2

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP6apache2-devel

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP6apache2-prefork

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP6apache2-utils

Fixed in:

2.4.58-150600.5.41.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP6apache2-worker

Fixed in:

2.4.58-150600.5.41.1

openSUSE:Leap 15.6apache2

Fixed in:

2.4.58-150600.5.41.1

openSUSE:Leap 15.6apache2-devel

Fixed in:

2.4.58-150600.5.41.1

openSUSE:Leap 15.6apache2-event

Fixed in:

2.4.58-150600.5.41.1

openSUSE:Leap 15.6apache2-manual

Fixed in:

2.4.58-150600.5.41.1

openSUSE:Leap 15.6apache2-prefork

Fixed in:

2.4.58-150600.5.41.1

openSUSE:Leap 15.6apache2-utils

Fixed in:

2.4.58-150600.5.41.1

openSUSE:Leap 15.6apache2-worker

Fixed in:

2.4.58-150600.5.41.1

References

REPORThttps://bugzilla.suse.com/1254511 REPORThttps://bugzilla.suse.com/1254512 REPORThttps://bugzilla.suse.com/1254514 REPORThttps://bugzilla.suse.com/1254515 WEBhttps://www.suse.com/security/cve/CVE-2025-55753 WEBhttps://www.suse.com/security/cve/CVE-2025-58098 WEBhttps://www.suse.com/security/cve/CVE-2025-65082 WEBhttps://www.suse.com/security/cve/CVE-2025-66200 ADVISORYhttps://www.suse.com/support/update/announcement/2026/suse-su-20260020-1/

SUSE-SU-2026:0020-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline