Synopsis
| Issued | 2025-07-24 |
| Severity | Medium |
| Updated Packages | kusanagi-httpd24 |
| Affected Products | Security Edition |
Description
An update for kusanagi-httpd24 is now available.
Security fix(es):
- CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 (cve.mitre.org) A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE information may not yet be available on those websites.
