Red Hat Security Advisory

RHSA-2025:14983

mod_http2 security update

Released 2025-09-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) mod_http2-2.0.26-4.el9_6.1

Fixes 1 record

TI-2025-31619 CVE-2025-49630 · GHSA-72h2-3r97-f454

Apache HTTP Server: mod_proxy_http2 denial of service

MEDIUM 42

In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01352 Published 2025-07-10 Partial fix CWE-617