ALSA-2025:23738

See a problem?
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2025:23738.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2025:23738
Related
Published
2025-12-22T00:00:00Z
Modified
2026-02-04T03:31:24.139823Z
Summary
Important: mod_md security update
Details

This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate provisioning. Certificates will be configured for managed domains and their virtual hosts automatically, including at renewal.

Security Fix(es):

  • modmd: Apache HTTP Server: modmd (ACME), unintended retry intervals (CVE-2025-55753)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Affected packages

AlmaLinux:10 / mod_md

Package

Name
mod_md
Purl
pkg:rpm/almalinux/mod_md

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:2.4.26-4.el10_1

Database specific

source
"https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2025:23738.json"