Red Hat Security AdvisoryRHSA-2018:2825
rh-perl526-mod_perl security update
Released 2018-09-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-perl526-mod_perl-2.0.10-10.el7, rh-perl526-mod_perl-devel-2.0.10-10.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-perl526-mod_perl-2.0.10-10.el7, rh-perl526-mod_perl-devel-2.0.10-10.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-perl526-mod_perl-2.0.10-10.el7, rh-perl526-mod_perl-devel-2.0.10-10.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-perl526-mod_perl-2.0.10-10.el7, rh-perl526-mod_perl-devel-2.0.10-10.el7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-perl526-mod_perl-2.0.10-10.el7, rh-perl526-mod_perl-devel-2.0.10-10.el7
Fixes 1 record
Priority MEDIUM 53
mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code fo…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08834 · Published 2018-08-26 · Partial fix CWE-94
