CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr' always evaluates to true

3 months ago 4

Hostinger Web Hosting

fix rewritecond expr regression in 2.4.64

*) SECURITY: CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 (cve.mitre.org) A bug in Apache HTTP Server 2.4.64 results in all "RewriteCond expr ..." tests evaluating as "true". Users are recommended to upgrade to version 2.4.65, which fixes the issue. Reviewed By: covener, ylavic, gbechis, jorton git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1927361 13f79535-47bb-0310-9956-ffa450edef68

1 parent ed99ef0 commit 8abb3d0

Read Entire Article

Hostinger Web Hosting