Red Hat Product Errata RHSA-2025:12838 - Security Advisory
Issued:
2025-08-05
Updated:
2025-08-05

RHSA-2025:12838 - Security Advisory

Synopsis

Moderate: mod_security security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for mod_security is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

ModSecurity is an open source intrusion detection and prevention engine for web applications.

Security Fix(es):

  • mod_security: ModSecurity Denial of Service Vulnerability (CVE-2025-48866)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x

Fixes

  • BZ - 2369827 - CVE-2025-48866 mod_security: ModSecurity Denial of Service Vulnerability

Red Hat Enterprise Linux for x86_64 9

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
x86_64
mod_security-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: 6fad0dde6f891e6bc1490e98f8ad5694fde050dcb16820588c783acd66a883a8
mod_security-debuginfo-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: b719862d5c9844a810d2744234f1db7f11defebe4198cbc53e7f4a76366d77e7
mod_security-debugsource-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: c9815b52c41a1267784f1703d3945848b6b37e2731d04e02f52e90793ebc476f
mod_security-mlogc-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: bb44bc5514dc862ceffa1e9c38207d161bf28606d923dbbedbf2261fa8618f24
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: d1019af528454e5f741802b2d3df12c19a9143ec2277b3998db188525cd5fb32

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
x86_64
mod_security-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: 6fad0dde6f891e6bc1490e98f8ad5694fde050dcb16820588c783acd66a883a8
mod_security-debuginfo-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: b719862d5c9844a810d2744234f1db7f11defebe4198cbc53e7f4a76366d77e7
mod_security-debugsource-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: c9815b52c41a1267784f1703d3945848b6b37e2731d04e02f52e90793ebc476f
mod_security-mlogc-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: bb44bc5514dc862ceffa1e9c38207d161bf28606d923dbbedbf2261fa8618f24
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: d1019af528454e5f741802b2d3df12c19a9143ec2277b3998db188525cd5fb32

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
x86_64
mod_security-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: 6fad0dde6f891e6bc1490e98f8ad5694fde050dcb16820588c783acd66a883a8
mod_security-debuginfo-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: b719862d5c9844a810d2744234f1db7f11defebe4198cbc53e7f4a76366d77e7
mod_security-debugsource-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: c9815b52c41a1267784f1703d3945848b6b37e2731d04e02f52e90793ebc476f
mod_security-mlogc-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: bb44bc5514dc862ceffa1e9c38207d161bf28606d923dbbedbf2261fa8618f24
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: d1019af528454e5f741802b2d3df12c19a9143ec2277b3998db188525cd5fb32

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
s390x
mod_security-2.9.6-2.el9_6.1.s390x.rpm SHA-256: c889a712393878ef57aef376badc1d871f3f13c37ec86b175680045209cae0c8
mod_security-debuginfo-2.9.6-2.el9_6.1.s390x.rpm SHA-256: f9b89662792e51a1026563a9b9435a62f946125b2b2398c8e612acd32e2e9c91
mod_security-debugsource-2.9.6-2.el9_6.1.s390x.rpm SHA-256: 0d2187013392f2d1c6afcc21aae8b6239d917df0b2d827f64a06117d4d0ac612
mod_security-mlogc-2.9.6-2.el9_6.1.s390x.rpm SHA-256: b2ffadd116d8da3e8ff131fe7be622be545c249ce9b2ac4fcc8a2f986961a36c
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.s390x.rpm SHA-256: 94db9df30b550a381680ac08d226c550a8da6bde959c56eed8df6f52c380258b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
s390x
mod_security-2.9.6-2.el9_6.1.s390x.rpm SHA-256: c889a712393878ef57aef376badc1d871f3f13c37ec86b175680045209cae0c8
mod_security-debuginfo-2.9.6-2.el9_6.1.s390x.rpm SHA-256: f9b89662792e51a1026563a9b9435a62f946125b2b2398c8e612acd32e2e9c91
mod_security-debugsource-2.9.6-2.el9_6.1.s390x.rpm SHA-256: 0d2187013392f2d1c6afcc21aae8b6239d917df0b2d827f64a06117d4d0ac612
mod_security-mlogc-2.9.6-2.el9_6.1.s390x.rpm SHA-256: b2ffadd116d8da3e8ff131fe7be622be545c249ce9b2ac4fcc8a2f986961a36c
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.s390x.rpm SHA-256: 94db9df30b550a381680ac08d226c550a8da6bde959c56eed8df6f52c380258b

Red Hat Enterprise Linux for Power, little endian 9

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
ppc64le
mod_security-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 0de129b395ef5096cf7cbea70cbc99c9395db2484a5bff2b88caa895cd5e1551
mod_security-debuginfo-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 0a6599f05ba6948cba06cb7100c1fcaace25c21ae35b4bd6b11c8c70bfe5a83a
mod_security-debugsource-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 3ea1ec6c4c45b315862f83cf4dbfe16a914cc02ed588ab2bc380fbcfa676b04a
mod_security-mlogc-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 80e14b54de27a8749332a87781839a579d20d00248a96221dde77e1e64f83796
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: ea98caacb3c27800e80184bfadff57fe6924d381d69803edef6360715a673c5a

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
ppc64le
mod_security-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 0de129b395ef5096cf7cbea70cbc99c9395db2484a5bff2b88caa895cd5e1551
mod_security-debuginfo-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 0a6599f05ba6948cba06cb7100c1fcaace25c21ae35b4bd6b11c8c70bfe5a83a
mod_security-debugsource-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 3ea1ec6c4c45b315862f83cf4dbfe16a914cc02ed588ab2bc380fbcfa676b04a
mod_security-mlogc-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 80e14b54de27a8749332a87781839a579d20d00248a96221dde77e1e64f83796
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: ea98caacb3c27800e80184bfadff57fe6924d381d69803edef6360715a673c5a

Red Hat Enterprise Linux for ARM 64 9

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
aarch64
mod_security-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 4ecb7426cbc5f05f5732a9e2def4f89cba16cd33f76fff64418cc2580d974f82
mod_security-debuginfo-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: e8f16cc59c4411c9b49459305f6f93831df5bab349705397308a8e5d114a67ba
mod_security-debugsource-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: a081569bf12c337525c6fe3815ef6b8487f73cfd4d5c04488c69ccd05d292c7e
mod_security-mlogc-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 8f8ea532f589044a67d9e2e93419f67e32b02668bca030debc83cc17876ccbb0
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 05e34e67a56ec61feba1fbef6603f38c19a619a592f4475b0562a5e2b870ae20

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
aarch64
mod_security-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 4ecb7426cbc5f05f5732a9e2def4f89cba16cd33f76fff64418cc2580d974f82
mod_security-debuginfo-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: e8f16cc59c4411c9b49459305f6f93831df5bab349705397308a8e5d114a67ba
mod_security-debugsource-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: a081569bf12c337525c6fe3815ef6b8487f73cfd4d5c04488c69ccd05d292c7e
mod_security-mlogc-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 8f8ea532f589044a67d9e2e93419f67e32b02668bca030debc83cc17876ccbb0
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 05e34e67a56ec61feba1fbef6603f38c19a619a592f4475b0562a5e2b870ae20

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
ppc64le
mod_security-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 0de129b395ef5096cf7cbea70cbc99c9395db2484a5bff2b88caa895cd5e1551
mod_security-debuginfo-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 0a6599f05ba6948cba06cb7100c1fcaace25c21ae35b4bd6b11c8c70bfe5a83a
mod_security-debugsource-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 3ea1ec6c4c45b315862f83cf4dbfe16a914cc02ed588ab2bc380fbcfa676b04a
mod_security-mlogc-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: 80e14b54de27a8749332a87781839a579d20d00248a96221dde77e1e64f83796
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.ppc64le.rpm SHA-256: ea98caacb3c27800e80184bfadff57fe6924d381d69803edef6360715a673c5a

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
x86_64
mod_security-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: 6fad0dde6f891e6bc1490e98f8ad5694fde050dcb16820588c783acd66a883a8
mod_security-debuginfo-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: b719862d5c9844a810d2744234f1db7f11defebe4198cbc53e7f4a76366d77e7
mod_security-debugsource-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: c9815b52c41a1267784f1703d3945848b6b37e2731d04e02f52e90793ebc476f
mod_security-mlogc-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: bb44bc5514dc862ceffa1e9c38207d161bf28606d923dbbedbf2261fa8618f24
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.x86_64.rpm SHA-256: d1019af528454e5f741802b2d3df12c19a9143ec2277b3998db188525cd5fb32

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
aarch64
mod_security-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 4ecb7426cbc5f05f5732a9e2def4f89cba16cd33f76fff64418cc2580d974f82
mod_security-debuginfo-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: e8f16cc59c4411c9b49459305f6f93831df5bab349705397308a8e5d114a67ba
mod_security-debugsource-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: a081569bf12c337525c6fe3815ef6b8487f73cfd4d5c04488c69ccd05d292c7e
mod_security-mlogc-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 8f8ea532f589044a67d9e2e93419f67e32b02668bca030debc83cc17876ccbb0
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.aarch64.rpm SHA-256: 05e34e67a56ec61feba1fbef6603f38c19a619a592f4475b0562a5e2b870ae20

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
mod_security-2.9.6-2.el9_6.1.src.rpm SHA-256: 50becef51eedcb850691e9f88d8813074a00da7a23d1ac1a341d5fe9da625bcd
s390x
mod_security-2.9.6-2.el9_6.1.s390x.rpm SHA-256: c889a712393878ef57aef376badc1d871f3f13c37ec86b175680045209cae0c8
mod_security-debuginfo-2.9.6-2.el9_6.1.s390x.rpm SHA-256: f9b89662792e51a1026563a9b9435a62f946125b2b2398c8e612acd32e2e9c91
mod_security-debugsource-2.9.6-2.el9_6.1.s390x.rpm SHA-256: 0d2187013392f2d1c6afcc21aae8b6239d917df0b2d827f64a06117d4d0ac612
mod_security-mlogc-2.9.6-2.el9_6.1.s390x.rpm SHA-256: b2ffadd116d8da3e8ff131fe7be622be545c249ce9b2ac4fcc8a2f986961a36c
mod_security-mlogc-debuginfo-2.9.6-2.el9_6.1.s390x.rpm SHA-256: 94db9df30b550a381680ac08d226c550a8da6bde959c56eed8df6f52c380258b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.