{"id":150696,"date":"2025-12-05T17:11:54","date_gmt":"2025-12-05T15:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-http-servera-apache-2-4-66-s-ustraneniem-5-uyazvimostej"},"modified":"2025-12-05T17:11:54","modified_gmt":"2025-12-05T15:11:54","slug":"reliz-http-servera-apache-2-4-66-s-ustraneniem-5-uyazvimostej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/no\/blog\/news\/reliz-http-servera-apache-2-4-66-s-ustraneniem-5-uyazvimostej","title":{"rendered":"Utgivelsen av http-serveren Apache 2.4.66 med l\u00f8sning p\u00e5 5 s\u00e5rbarheter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Apache HTTP Server 2.4.66 er lansert, med utbedring av 5 s\u00e5rbarheter og flere titalls endringer.    <\/p>\n<p>S\u00e5rbarhetene som er utbedret (de to f\u00f8rste har moderat faregrad, mens de andre har lav):  <\/p>\n<ul>\n<li class=\"l\"> CVE-2025-66200 \u2014 organisasjon av CGI-skriptkj\u00f8ring under en annen bruker i konfigurasjoner med mod_userdir og suexec gjennom manipulering av direktivet \u00abRequestHeader\u00bb i .htaccess-filen (hvis bruken av .htaccess er tillatt).\n<li class=\"l\"> CVE-2025-59775 \u2014 SSRF-s\u00e5rbarhet (Server-Side Request Forgery) som f\u00f8rer til lekkasje av NTLM-hash til en annen server n\u00e5r Apache httpd brukes p\u00e5 Windows-plattformen i konfigurasjoner med innstillingene \u00abAllowEncodedSlashes On\u00bb og \u00abMergeSlashes Off\u00bb.\n<li class=\"l\"> CVE-2025-65082 \u2014 omdefinering av milj\u00f8variabler for CGI-skript p\u00e5 grunn av feilaktig escaping av kontrolltegn (setting av variabler i innstillingene kan overstyre verdiene til variabler som er beregnet <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/no\/server\/dts-prohoster\/\"   title=\"serveren\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3114\">serveren<\/a> for CGI).\n<li class=\"l\"> CVE-2025-58098 \u2014 overf\u00f8ring av escaping av sp\u00f8rringsstreng til SSI (Server Side Includes) direktivet \u00ab\u00bb i konfigurasjoner med mod_cgid i stedet for mod_cgi.\n<li class=\"l\"> CVE-2025-55753 \u2014 sending av kontinuerlige (uten forsinkelse mellom foresp\u00f8rslene) repeterte ACME-foresp\u00f8rselene for sertifikatoppdatering i modulen mod_md etter et stort antall mislykkede fors\u00f8k p\u00e5 oppdatering av et utl\u00f8pt sertifikat.    <\/ul>\n<p>Blant ikke-sikkerhetsrelaterte forbedringer:   <\/p>\n<ul>\n<li class=\"l\"> Modulen mod_md med implementering av ACME-protokollen er oppdatert til versjon 2.6.6:\n<ul>\n<li class=\"l\"> St\u00f8tte for utvidelsen av ARI-protokollen (ACME Renewal Information) er lagt til, noe som gj\u00f8r det mulig \u00e5 f\u00e5 informasjon om behovet for sertifikatoppdateringer og velge det optimale tidspunktet for oppdateringer. For \u00e5 aktivere ARI er det foresl\u00e5tt en direktiv \u00abMDRenewViaARI on|off\u00bb.\n<li class=\"l\"> Direktivet \u00abMDInitialDelay\u00bb er implementert for \u00e5 sette en forsinkelse i sertifikatkontrollen etter serveromstart.\n<li class=\"l\"> Standardverdien for parameteren MDRetryDelay (forsinkelse f\u00f8r ny fors\u00f8k etter feil) er \u00f8kt til 30 sekunder.\n<li class=\"l\"> St\u00f8tte for <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/no\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"291\">VPN<\/a>- Tailscale-nettverket er avsluttet.\n<li class=\"l\"> Feil og minnelekkasjer er rettet.   <\/ul>\n<li class=\"l\"> Modulet mod_http2 er oppdatert til versjon 2.0.35, hvor direktivet \u00abH2MaxStreamErrors\u00bb er lagt til for \u00e5 sette en grense for antall feil i str\u00f8mmen, etter at den vil koble tilkoblingen.\n<li class=\"l\">  Korrekt behandling av svar med kode 3 fra mod_cache er blitt implementert i mod_http2.\n<li class=\"l\"> I mod_proxy_http2 er direktivet \u00abProxyErrorOverride\u00bb implementert for \u00e5 overstyre feilkodene.\n<li class=\"l\"> I mpm_common er direktivet \u00abListenTCPDeferAccept\u00bb lagt til, som lar deg angi verdien p\u00e5 alternativet TCP_DEFER_ACCEPT (aktivert kun ved mottak av data p\u00e5 socketen) for lytte-socketen.\n<li class=\"l\"> I mod_ssl er direktivet \u00abSSLVHostSNIPolicy\u00bb lagt til for \u00e5 konfigurere kompatibilitetsregler for virtuelle vertene.      <\/ul>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=64380\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache 2.4.66, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439. \u0423\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0432\u044b\u0435 2 \u0438\u043c\u0435\u044e\u0442 \u0443\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0438\u0437\u043a\u0438\u0439): CVE-2025-66200 &#8212; \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 CGI-\u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043f\u043e\u0434 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u0441 mod_userdir \u0438 suexec \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u043e\u0439 &#171;RequestHeader&#187; \u0432 \u0444\u0430\u0439\u043b\u0435 .htaccess (\u0435\u0441\u043b\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 .htaccess). CVE-2025-59775 &#8212; [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-150696","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache 2.4.66, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/no\/blog\/news\/reliz-http-servera-apache-2-4-66-s-ustraneniem-5-uyazvimostej\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"nn_NO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 http-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache 2.4.66 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache 2.4.66, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/no\/blog\/news\/reliz-http-servera-apache-2-4-66-s-ustraneniem-5-uyazvimostej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-12-05T15:11:54+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-12-05T15:11:54+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Utgivelsen av http-serveren Apache 2.4.66 med 5 s\u00e5rbarheter fikset | ProHoster","description":"Apache HTTP Server 2.4.66 er lansert, med utbedring av 5 s\u00e5rbarheter og flere titalls endringer.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/news\/reliz-http-servera-apache-2-4-66-s-ustraneniem-5-uyazvimostej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 http-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache 2.4.66 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 HTTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 Apache 2.4.66, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432\u043d\u0435\u0441\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439.","og:url":"https:\/\/prohoster.info\/no\/blog\/news\/reliz-http-servera-apache-2-4-66-s-ustraneniem-5-uyazvimostej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-05T15:11:54+00:00","article:modified_time":"2025-12-05T15:11:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"150696","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:15:03","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:25:22","updated":"2026-02-09 22:15:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/150696","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=150696"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/150696\/revisions"}],"predecessor-version":[{"id":160395,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/150696\/revisions\/160395"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=150696"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=150696"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=150696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}