BSD Ports

Apache httpd -- Multiple vulnerabilities

· CVE-2025-66200, CVE-2025-65082, CVE-2025-59775, CVE-2025-58098, CVE-2025-55753 · VuXML entry

The Apache httpd project reports: See changelog or 2.4 vulnerabilities for details.

Affected versions

By system

1 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.

SystemPortVersionStateFixed
DragonFlywww/apache242.4.63 vulnerable since 2025-12-04
NetBSDwww/apache242.4.69 not listed
MidnightBSDwww/apache242.4.69 out of range, by version
FreeBSDwww/apache242.4.69 fixed (301 days after)