RHSA-2025:13680

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2025:13680

Import Source

https://security.access.redhat.com/data/osv/RHSA-2025:13680.json

JSON Data

https://api.osv.dev/v1/vulns/RHSA-2025:13680

Upstream

CVE-2024-47252

CVE-2025-23048

CVE-2025-47947

CVE-2025-49630

CVE-2025-49812

Published

2025-08-15T10:04:27Z

Modified

2025-08-15T14:46:19.432887Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP1 security update

Details

References

Affected packages

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd

Package

Name: jbcs-httpd24-httpd
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-debuginfo

Package

Name: jbcs-httpd24-httpd-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-devel

Package

Name: jbcs-httpd24-httpd-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-manual

Package

Name: jbcs-httpd24-httpd-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-selinux

Package

Name: jbcs-httpd24-httpd-selinux
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-tools

Package

Name: jbcs-httpd24-httpd-tools
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2

Package

Name: jbcs-httpd24-mod_http2
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.0.29-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2-debuginfo

Package

Name: jbcs-httpd24-mod_http2-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.0.29-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk

Package

Name: jbcs-httpd24-mod_jk
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.50-9.redhat_1.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-ap24

Package

Name: jbcs-httpd24-mod_jk-ap24
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.50-9.redhat_1.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-debuginfo

Package

Name: jbcs-httpd24-mod_jk-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.50-9.redhat_1.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_ldap

Package

Name: jbcs-httpd24-mod_ldap
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_md

Package

Name: jbcs-httpd24-mod_md
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.28-10.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_md-debuginfo

Package

Name: jbcs-httpd24-mod_md-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.28-10.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_proxy_cluster

Package

Name: jbcs-httpd24-mod_proxy_cluster
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.22-4.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_proxy_cluster-debuginfo

Package

Name: jbcs-httpd24-mod_proxy_cluster-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.22-4.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_proxy_html

Package

Name: jbcs-httpd24-mod_proxy_html
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_security

Package

Name: jbcs-httpd24-mod_security
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.6-11.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_security-debuginfo

Package

Name: jbcs-httpd24-mod_security-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.6-11.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_session

Package

Name: jbcs-httpd24-mod_session
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_ssl

Package

Name: jbcs-httpd24-mod_ssl
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-8.el7jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd

Package

Name: jbcs-httpd24-httpd
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-debuginfo

Package

Name: jbcs-httpd24-httpd-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-devel

Package

Name: jbcs-httpd24-httpd-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-manual

Package

Name: jbcs-httpd24-httpd-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-selinux

Package

Name: jbcs-httpd24-httpd-selinux
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-tools

Package

Name: jbcs-httpd24-httpd-tools
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-tools-debuginfo

Package

Name: jbcs-httpd24-httpd-tools-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2

Package

Name: jbcs-httpd24-mod_http2
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.0.29-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2-debuginfo

Package

Name: jbcs-httpd24-mod_http2-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.0.29-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk

Package

Name: jbcs-httpd24-mod_jk
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.50-9.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-ap24

Package

Name: jbcs-httpd24-mod_jk-ap24
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.50-9.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-ap24-debuginfo

Package

Name: jbcs-httpd24-mod_jk-ap24-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.50-9.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ldap

Package

Name: jbcs-httpd24-mod_ldap
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ldap-debuginfo

Package

Name: jbcs-httpd24-mod_ldap-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_md

Package

Name: jbcs-httpd24-mod_md
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.28-10.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_md-debuginfo

Package

Name: jbcs-httpd24-mod_md-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.28-10.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_cluster

Package

Name: jbcs-httpd24-mod_proxy_cluster
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.22-4.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_cluster-debuginfo

Package

Name: jbcs-httpd24-mod_proxy_cluster-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.22-4.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_html

Package

Name: jbcs-httpd24-mod_proxy_html
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_html-debuginfo

Package

Name: jbcs-httpd24-mod_proxy_html-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_security

Package

Name: jbcs-httpd24-mod_security
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.6-11.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_security-debuginfo

Package

Name: jbcs-httpd24-mod_security-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.6-11.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_session

Package

Name: jbcs-httpd24-mod_session
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_session-debuginfo

Package

Name: jbcs-httpd24-mod_session-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ssl

Package

Name: jbcs-httpd24-mod_ssl
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ssl-debuginfo

Package

Name: jbcs-httpd24-mod_ssl-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-8.el8jbcs