Security update for apache2 SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2026:0019-1 Final 1 1 2026-01-05T11:08:00Z current 2026-01-05T11:08:00Z 2026-01-05T11:08:00Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for apache2 This update for apache2 fixes the following issues: - CVE-2025-55753: Fixed mod_md (ACME) unintended retry intervals (bsc#1254511) - CVE-2025-65082: Fixed CGI environment variable override (bsc#1254514) - CVE-2025-58098: Fixed Server Side Includes adding query string to #exec cmd=... (bsc#1254512) - CVE-2025-66200: Fixed mod_userdir+suexec bypass via AllowOverride FileInfo (bsc#1254515) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/manager/4.3/proxy-httpd:latest-2026-19,SUSE-2026-19,SUSE-SLE-Module-Server-Applications-15-SP7-2026-19,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-19,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-19,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-19,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-19,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-19,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-19,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-19,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-19,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-19,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-19,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-LTS-2026-19,SUSE-SLE-Product-SUSE-Manager-Server-4.3-LTS-2026-19 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2026/suse-su-20260019-1/ Link for SUSE-SU-2026:0019-1 https://lists.suse.com/pipermail/sle-security-updates/2026-January/023669.html E-Mail link for SUSE-SU-2026:0019-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1254511 SUSE Bug 1254511 https://bugzilla.suse.com/1254512 SUSE Bug 1254512 https://bugzilla.suse.com/1254514 SUSE Bug 1254514 https://bugzilla.suse.com/1254515 SUSE Bug 1254515 https://www.suse.com/security/cve/CVE-2025-55753/ SUSE CVE CVE-2025-55753 page https://www.suse.com/security/cve/CVE-2025-58098/ SUSE CVE CVE-2025-58098 page https://www.suse.com/security/cve/CVE-2025-65082/ SUSE CVE CVE-2025-65082 page https://www.suse.com/security/cve/CVE-2025-66200/ SUSE CVE CVE-2025-66200 page Container suse/manager/4.3/proxy-httpd:latest SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Manager Proxy LTS 4.3 SUSE Manager Server LTS 4.3 apache2-2.4.51-150400.6.52.1 apache2-prefork-2.4.51-150400.6.52.1 apache2-utils-2.4.51-150400.6.52.1 apache2-devel-2.4.51-150400.6.52.1 apache2-doc-2.4.51-150400.6.52.1 apache2-event-2.4.51-150400.6.52.1 apache2-example-pages-2.4.51-150400.6.52.1 apache2-worker-2.4.51-150400.6.52.1 apache2-2.4.51-150400.6.52.1 as a component of Container suse/manager/4.3/proxy-httpd:latest apache2-prefork-2.4.51-150400.6.52.1 as a component of Container suse/manager/4.3/proxy-httpd:latest apache2-utils-2.4.51-150400.6.52.1 as a component of Container suse/manager/4.3/proxy-httpd:latest apache2-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS apache2-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS apache2-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS apache2-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 apache2-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS apache2-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server 15 SP6-LTSS apache2-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 apache2-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 apache2-2.4.51-150400.6.52.1 as a component of SUSE Manager Proxy LTS 4.3 apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Manager Proxy LTS 4.3 apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Manager Proxy LTS 4.3 apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Manager Proxy LTS 4.3 apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Manager Proxy LTS 4.3 apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Manager Proxy LTS 4.3 apache2-2.4.51-150400.6.52.1 as a component of SUSE Manager Server LTS 4.3 apache2-devel-2.4.51-150400.6.52.1 as a component of SUSE Manager Server LTS 4.3 apache2-doc-2.4.51-150400.6.52.1 as a component of SUSE Manager Server LTS 4.3 apache2-prefork-2.4.51-150400.6.52.1 as a component of SUSE Manager Server LTS 4.3 apache2-utils-2.4.51-150400.6.52.1 as a component of SUSE Manager Server LTS 4.3 apache2-worker-2.4.51-150400.6.52.1 as a component of SUSE Manager Server LTS 4.3 An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures (~30 days in default configurations), to the backoff timer becoming 0. Attempts to renew the certificate then are repeated without delays until it succeeds. This issue affects Apache HTTP Server: from 2.4.30 before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. CVE-2025-55753 Container suse/manager/4.3/proxy-httpd:latest:apache2-2.4.51-150400.6.52.1 Container suse/manager/4.3/proxy-httpd:latest:apache2-prefork-2.4.51-150400.6.52.1 Container suse/manager/4.3/proxy-httpd:latest:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-devel-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-prefork-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-utils-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-worker-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-devel-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-prefork-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-utils-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-worker-2.4.51-150400.6.52.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260019-1/ https://www.suse.com/security/cve/CVE-2025-55753.html CVE-2025-55753 https://bugzilla.suse.com/1254511 SUSE Bug 1254511 Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives. This issue affects Apache HTTP Server before 2.4.66. Users are recommended to upgrade to version 2.4.66, which fixes the issue. CVE-2025-58098 Container suse/manager/4.3/proxy-httpd:latest:apache2-2.4.51-150400.6.52.1 Container suse/manager/4.3/proxy-httpd:latest:apache2-prefork-2.4.51-150400.6.52.1 Container suse/manager/4.3/proxy-httpd:latest:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-devel-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-prefork-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-utils-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-worker-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-devel-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-prefork-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-utils-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-worker-2.4.51-150400.6.52.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260019-1/ https://www.suse.com/security/cve/CVE-2025-58098.html CVE-2025-58098 https://bugzilla.suse.com/1254512 SUSE Bug 1254512 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server for CGI programs. This issue affects Apache HTTP Server from 2.4.0 through 2.4.65. Users are recommended to upgrade to version 2.4.66 which fixes the issue. CVE-2025-65082 Container suse/manager/4.3/proxy-httpd:latest:apache2-2.4.51-150400.6.52.1 Container suse/manager/4.3/proxy-httpd:latest:apache2-prefork-2.4.51-150400.6.52.1 Container suse/manager/4.3/proxy-httpd:latest:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-devel-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-prefork-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-utils-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-worker-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-devel-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-prefork-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-utils-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-worker-2.4.51-150400.6.52.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260019-1/ https://www.suse.com/security/cve/CVE-2025-65082.html CVE-2025-65082 https://bugzilla.suse.com/1254514 SUSE Bug 1254514 mod_userdir+suexec bypass via AllowOverride FileInfo vulnerability in Apache HTTP Server. Users with access to use the RequestHeader directive in htaccess can cause some CGI scripts to run under an unexpected userid. This issue affects Apache HTTP Server: from 2.4.7 through 2.4.65. Users are recommended to upgrade to version 2.4.66, which fixes the issue. CVE-2025-66200 Container suse/manager/4.3/proxy-httpd:latest:apache2-2.4.51-150400.6.52.1 Container suse/manager/4.3/proxy-httpd:latest:apache2-prefork-2.4.51-150400.6.52.1 Container suse/manager/4.3/proxy-httpd:latest:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP4-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP5-LTSS:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server 15 SP6-LTSS:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-devel-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-doc-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-prefork-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-utils-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:apache2-worker-2.4.51-150400.6.52.1 SUSE Linux Enterprise Server for SAP Applications 15 SP6:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-devel-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-prefork-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-utils-2.4.51-150400.6.52.1 SUSE Manager Proxy LTS 4.3:apache2-worker-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-devel-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-doc-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-prefork-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-utils-2.4.51-150400.6.52.1 SUSE Manager Server LTS 4.3:apache2-worker-2.4.51-150400.6.52.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2026/suse-su-20260019-1/ https://www.suse.com/security/cve/CVE-2025-66200.html CVE-2025-66200 https://bugzilla.suse.com/1254515 SUSE Bug 1254515