Date: Mon, 28 Jul 2025 17:42:48 +0000 From: bugzilla-noreply@freebsd.org To: apache@FreeBSD.org Subject: [Bug 288514] www/apache24: port may be updated to 2.4.65 Message-ID: <bug-288514-16115-U1sSNeEfzm@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-288514-16115@https.bugs.freebsd.org/bugzilla/> References: <bug-288514-16115@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288514 Vladimir Druzenko <vvd@FreeBSD.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |merge-quarterly? URL| |https://downloads.apache.or | |g/httpd/CHANGES_2.4.65 --- Comment #1 from Vladimir Druzenko <vvd@FreeBSD.org> --- Fixed regression: Changes with Apache 2.4.65 *) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 (cve.mitre.org) A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue. -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-288514-16115-U1sSNeEfzm>