[CLSA-2026:1781253209] httpd: Fix of CVE-2025-58098
Type:
security
Severity:
Important
Release date:
2026-06-15 20:31:23 UTC
Description:
- CVE-2025-58098: mod_cgid with SSI #exec cmd passed the shell-escaped query string as extra arguments to the executed shell command; do not pass r->args for SSI requests
CVEs fixed:
Updated packages:
  • httpd-2.2.15-72.el6.tuxcare.els13.x86_64.rpm
    sha:ff383c6aa2c0cc6b3c38aa74e34816d91b090cb313803277d9dd21ceedef02ee
  • httpd-devel-2.2.15-72.el6.tuxcare.els13.i686.rpm
    sha:9d61332eeb5b4633154a2636aad9bc7ea2f09aa2075c826c7e6ee89d54fab0ac
  • httpd-devel-2.2.15-72.el6.tuxcare.els13.x86_64.rpm
    sha:6d252dfacbd9d413e4da4dbc7062e794fca47a2759ad4729da93761afda62e90
  • httpd-manual-2.2.15-72.el6.tuxcare.els13.noarch.rpm
    sha:49fd86cf3b7b89485463d41ec49f4f525786a9d8667452e5d00df0d26fbd48f2
  • httpd-tools-2.2.15-72.el6.tuxcare.els13.x86_64.rpm
    sha:e8065de3059a130d8811c16c8030d7823ca6e2ed95eff1900aaeba728bb14786
  • mod_ssl-2.2.15-72.el6.tuxcare.els13.x86_64.rpm
    sha:3c521b02e50f39854802483c5ef73addb7f3c0efa321febf2c169baaabe7e162
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.