UbuntuUpdates.org

Package "libapache2-mod-perl2-doc"

Name: libapache2-mod-perl2-doc

Description:

Integration of perl with the Apache2 web server - documentation

Latest version: 2.0.9-4ubuntu1.2
Release: xenial (16.04)
Level: security
Repository: main
Head package: libapache2-mod-perl2
Homepage: http://perl.apache.org/

Links


Download "libapache2-mod-perl2-doc"


Other versions of "libapache2-mod-perl2-doc" in Xenial

Repository Area Version
base main 2.0.9-4ubuntu1
updates main 2.0.9-4ubuntu1.2

Changelog

Version: 2.0.9-4ubuntu1.2 2018-11-21 17:06:22 UTC

  libapache2-mod-perl2 (2.0.9-4ubuntu1.2) xenial-security; urgency=medium

  * SECURITY UPDATE: arbitrary perl code execution via .htaccess file
    - debian/patches/CVE-2011-2767.patch: only allow perl and pod sections
      in server configuration and not per directory in
      src/modules/perl/mod_perl.c.
    - CVE-2011-2767

 -- Marc Deslauriers <email address hidden> Thu, 15 Nov 2018 08:54:13 -0500

CVE-2011-2767 mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the do



About   -   Send Feedback to @ubuntu_updates