Wind River Support Network

HomeDefectsLIN1021-19839

Fixed

LIN1021-19839 : Security Advisory - apache2 - CVE-2025-58098

Created: Dec 8, 2025 Updated: Jun 8, 2026

Resolved Date: Jun 8, 2026

Found In Version: 10.21.20.1

Fix Version: 10.21.20.27

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

Apache HTTP Server 2.4.65 and earlier with Server Side Includes (SSI) enabled and mod_cgid (but not mod_cgi) passes the shell-escaped query string to #exec cmd="..." directives.[EOL][EOL]This issue affects Apache HTTP Server before 2.4.66.[EOL][EOL]Users are recommended to upgrade to version 2.4.66, which fixes the issue.

CVEs

CVE-2025-58098