Skip to navigation

Security Advisory Low: mod_perl security update

Advisory: RHSA-2007:0395-8
Type: Security Advisory
Severity: Low
Issued on: 2007-06-14
Last updated on: 2007-06-14
Affected Products: RHEL Desktop Workstation (v. 5 client)
Red Hat Desktop (v. 3)
Red Hat Desktop (v. 4)
Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux AS (v. 4.5.z)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux ES (v. 4.5.z)
Red Hat Enterprise Linux WS (v. 3)
Red Hat Enterprise Linux WS (v. 4)
CVEs (cve.mitre.org): CVE-2007-1349

Details

Updated mod_perl packages that fix a security issue are now available for Red
Hat Enterprise Linux 3, 4, 5.

This update has been rated as having low security impact by the Red
Hat Security Response Team.

Mod_perl incorporates a Perl interpreter into the Apache web server,
so that the Apache web server can directly execute Perl code.

An issue was found in the "namespace_from_uri" method of the
ModPerl::RegistryCooker class. If a server implemented a mod_perl registry
module using this method, a remote attacker requesting a carefully crafted
URI can cause resource consumption, which could lead to a denial of service
(CVE-2007-1349).

Users of mod_perl should update to these erratum packages which contain a
backported fix to correct this issue.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

RHEL Desktop Workstation (v. 5 client)

SRPMS:
mod_perl-2.0.2-6.3.el5.src.rpm
File outdated by:  RHBA-2009:0068
    MD5: aaf3252fc98947caed9fb49b2a6a87e1
 
IA-32:
mod_perl-2.0.2-6.3.el5.i386.rpm
File outdated by:  RHBA-2009:0068
    MD5: d88c0b0178e1d44098cc00f6c247ebcf
mod_perl-devel-2.0.2-6.3.el5.i386.rpm
File outdated by:  RHBA-2009:0068
    MD5: 99370acfad55f35e875800b5fe703188
 
x86_64:
mod_perl-2.0.2-6.3.el5.x86_64.rpm
File outdated by:  RHBA-2009:0068
    MD5: a4d8aee3ed9cb230b89248677a3243b7
mod_perl-devel-2.0.2-6.3.el5.i386.rpm
File outdated by:  RHBA-2009:0068
    MD5: 99370acfad55f35e875800b5fe703188
mod_perl-devel-2.0.2-6.3.el5.x86_64.rpm
File outdated by:  RHBA-2009:0068
    MD5: 52528ac5a225844b60be1e12970708e6
 
Red Hat Desktop (v. 3)

SRPMS:
mod_perl-1.99_09-12.ent.src.rpm     MD5: 0171ede91bda294c9be41a393f5cb6d4
 
IA-32:
mod_perl-1.99_09-12.ent.i386.rpm     MD5: 7a27f7eeab936185438be6dc21b9f163
mod_perl-devel-1.99_09-12.ent.i386.rpm     MD5: c03fca36402721ef0f24a14a0349eb3e
 
x86_64:
mod_perl-1.99_09-12.ent.x86_64.rpm     MD5: 2a5a9082da94bda6b7a798bfad7ebd29
mod_perl-devel-1.99_09-12.ent.x86_64.rpm     MD5: 53529e39663be959990b371f03da7e74
 
Red Hat Desktop (v. 4)

SRPMS:
mod_perl-1.99_16-4.5.src.rpm     MD5: ef24c627d47dc3d60d0bde85403517fb
 
IA-32:
mod_perl-1.99_16-4.5.i386.rpm     MD5: 5e63180e9f49603b9a7eea1d1a436f66
mod_perl-devel-1.99_16-4.5.i386.rpm     MD5: 1547f7f7bb7203623e0e047af674db00
 
x86_64:
mod_perl-1.99_16-4.5.x86_64.rpm     MD5: 8f98dc9f7ea3a2ff88e9ecc748486836
mod_perl-devel-1.99_16-4.5.x86_64.rpm     MD5: 0f4ebf1d9ad592316fe2f5941b72ee02
 
Red Hat Enterprise Linux (v. 5 server)

SRPMS:
mod_perl-2.0.2-6.3.el5.src.rpm
File outdated by:  RHBA-2009:0068
    MD5: aaf3252fc98947caed9fb49b2a6a87e1
 
IA-32:
mod_perl-2.0.2-6.3.el5.i386.rpm
File outdated by:  RHBA-2009:0068
    MD5: d88c0b0178e1d44098cc00f6c247ebcf
mod_perl-devel-2.0.2-6.3.el5.i386.rpm
File outdated by:  RHBA-2009:0068
    MD5: 99370acfad55f35e875800b5fe703188
 
IA-64:
mod_perl-2.0.2-6.3.el5.ia64.rpm
File outdated by:  RHBA-2009:0068
    MD5: b4788c1cd93d88c69fb4b0cbb25477d1
mod_perl-devel-2.0.2-6.3.el5.ia64.rpm
File outdated by:  RHBA-2009:0068
    MD5: b0cb019e4c281b170f5ecdab8d06d357
 
PPC:
mod_perl-2.0.2-6.3.el5.ppc.rpm
File outdated by:  RHBA-2009:0068
    MD5: fbb746e182f83cf75783ed3c3f5d0f3c
mod_perl-devel-2.0.2-6.3.el5.ppc.rpm
File outdated by:  RHBA-2009:0068
    MD5: cc9eab5a407bb1aa32044322bba3f066
mod_perl-devel-2.0.2-6.3.el5.ppc64.rpm
File outdated by:  RHBA-2009:0068
    MD5: 55d56ce508f54b17d2fa16b6d3f559ff
 
s390x:
mod_perl-2.0.2-6.3.el5.s390x.rpm
File outdated by:  RHBA-2009:0068
    MD5: f78ffe414aaae20c21e0d4c1550c8fa6
mod_perl-devel-2.0.2-6.3.el5.s390.rpm
File outdated by:  RHBA-2009:0068
    MD5: 1f4907d85ca489b496c203f5709ca12e
mod_perl-devel-2.0.2-6.3.el5.s390x.rpm
File outdated by:  RHBA-2009:0068
    MD5: 1b7a27618ede9a54e840167cf048b191
 
x86_64:
mod_perl-2.0.2-6.3.el5.x86_64.rpm
File outdated by:  RHBA-2009:0068
    MD5: a4d8aee3ed9cb230b89248677a3243b7
mod_perl-devel-2.0.2-6.3.el5.i386.rpm
File outdated by:  RHBA-2009:0068
    MD5: 99370acfad55f35e875800b5fe703188
mod_perl-devel-2.0.2-6.3.el5.x86_64.rpm
File outdated by:  RHBA-2009:0068
    MD5: 52528ac5a225844b60be1e12970708e6
 
Red Hat Enterprise Linux AS (v. 3)

SRPMS:
mod_perl-1.99_09-12.ent.src.rpm     MD5: 0171ede91bda294c9be41a393f5cb6d4
 
IA-32:
mod_perl-1.99_09-12.ent.i386.rpm     MD5: 7a27f7eeab936185438be6dc21b9f163
mod_perl-devel-1.99_09-12.ent.i386.rpm     MD5: c03fca36402721ef0f24a14a0349eb3e
 
IA-64:
mod_perl-1.99_09-12.ent.ia64.rpm     MD5: 5f64caab9566ec78fea2f49925dcb66c
mod_perl-devel-1.99_09-12.ent.ia64.rpm     MD5: c8841a63e4054afa07076bf719f6f1cc
 
PPC:
mod_perl-1.99_09-12.ent.ppc.rpm     MD5: 4041e7498c8526fcaeb145c5554c6e1b
mod_perl-devel-1.99_09-12.ent.ppc.rpm     MD5: c7d0ed21a61c6579848e0aed3472900c
 
s390:
mod_perl-1.99_09-12.ent.s390.rpm     MD5: 2167d5d188ccdf80c274b96ad6efe2fe
mod_perl-devel-1.99_09-12.ent.s390.rpm     MD5: 74142958130662ae1c6c8a8c995d3b95
 
s390x:
mod_perl-1.99_09-12.ent.s390x.rpm     MD5: 02d6617187e67c53974755ed6feea8bf
mod_perl-devel-1.99_09-12.ent.s390x.rpm     MD5: ba41190b70652a9f0a6d03f1dddc3a6e
 
x86_64:
mod_perl-1.99_09-12.ent.x86_64.rpm     MD5: 2a5a9082da94bda6b7a798bfad7ebd29
mod_perl-devel-1.99_09-12.ent.x86_64.rpm     MD5: 53529e39663be959990b371f03da7e74
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
mod_perl-1.99_16-4.5.src.rpm     MD5: ef24c627d47dc3d60d0bde85403517fb
 
IA-32:
mod_perl-1.99_16-4.5.i386.rpm     MD5: 5e63180e9f49603b9a7eea1d1a436f66
mod_perl-devel-1.99_16-4.5.i386.rpm     MD5: 1547f7f7bb7203623e0e047af674db00
 
IA-64:
mod_perl-1.99_16-4.5.ia64.rpm     MD5: 776b91d6d9f1f6bfabde74adf613ed60
mod_perl-devel-1.99_16-4.5.ia64.rpm     MD5: d1fe40da7d74a8d049bbe79b2a52d53a
 
PPC:
mod_perl-1.99_16-4.5.ppc.rpm     MD5: 66dc96eeee73965d1a24fd44517f9342
mod_perl-devel-1.99_16-4.5.ppc.rpm     MD5: c04efe5898b7860ba01fe897a2cc48fe
 
s390:
mod_perl-1.99_16-4.5.s390.rpm     MD5: 5cd551206c9c35d256b63a2bbcbf6791
mod_perl-devel-1.99_16-4.5.s390.rpm     MD5: b8a90ccd2ef7f742efd4c540928162d4
 
s390x:
mod_perl-1.99_16-4.5.s390x.rpm     MD5: 73021886d359704621a32441c9d0a463
mod_perl-devel-1.99_16-4.5.s390x.rpm     MD5: 73862cb7007c793a962db49b23dd2162
 
x86_64:
mod_perl-1.99_16-4.5.x86_64.rpm     MD5: 8f98dc9f7ea3a2ff88e9ecc748486836
mod_perl-devel-1.99_16-4.5.x86_64.rpm     MD5: 0f4ebf1d9ad592316fe2f5941b72ee02
 
Red Hat Enterprise Linux AS (v. 4.5.z)

SRPMS:
mod_perl-1.99_16-4.5.src.rpm     MD5: ef24c627d47dc3d60d0bde85403517fb
 
IA-32:
mod_perl-1.99_16-4.5.i386.rpm     MD5: 5e63180e9f49603b9a7eea1d1a436f66
mod_perl-devel-1.99_16-4.5.i386.rpm     MD5: 1547f7f7bb7203623e0e047af674db00
 
IA-64:
mod_perl-1.99_16-4.5.ia64.rpm     MD5: 776b91d6d9f1f6bfabde74adf613ed60
mod_perl-devel-1.99_16-4.5.ia64.rpm     MD5: d1fe40da7d74a8d049bbe79b2a52d53a
 
PPC:
mod_perl-1.99_16-4.5.ppc.rpm     MD5: 66dc96eeee73965d1a24fd44517f9342
mod_perl-devel-1.99_16-4.5.ppc.rpm     MD5: c04efe5898b7860ba01fe897a2cc48fe
 
s390:
mod_perl-1.99_16-4.5.s390.rpm     MD5: 5cd551206c9c35d256b63a2bbcbf6791
mod_perl-devel-1.99_16-4.5.s390.rpm     MD5: b8a90ccd2ef7f742efd4c540928162d4
 
s390x:
mod_perl-1.99_16-4.5.s390x.rpm     MD5: 73021886d359704621a32441c9d0a463
mod_perl-devel-1.99_16-4.5.s390x.rpm     MD5: 73862cb7007c793a962db49b23dd2162
 
x86_64:
mod_perl-1.99_16-4.5.x86_64.rpm     MD5: 8f98dc9f7ea3a2ff88e9ecc748486836
mod_perl-devel-1.99_16-4.5.x86_64.rpm     MD5: 0f4ebf1d9ad592316fe2f5941b72ee02
 
Red Hat Enterprise Linux ES (v. 3)

SRPMS:
mod_perl-1.99_09-12.ent.src.rpm     MD5: 0171ede91bda294c9be41a393f5cb6d4
 
IA-32:
mod_perl-1.99_09-12.ent.i386.rpm     MD5: 7a27f7eeab936185438be6dc21b9f163
mod_perl-devel-1.99_09-12.ent.i386.rpm     MD5: c03fca36402721ef0f24a14a0349eb3e
 
IA-64:
mod_perl-1.99_09-12.ent.ia64.rpm     MD5: 5f64caab9566ec78fea2f49925dcb66c
mod_perl-devel-1.99_09-12.ent.ia64.rpm     MD5: c8841a63e4054afa07076bf719f6f1cc
 
x86_64:
mod_perl-1.99_09-12.ent.x86_64.rpm     MD5: 2a5a9082da94bda6b7a798bfad7ebd29
mod_perl-devel-1.99_09-12.ent.x86_64.rpm     MD5: 53529e39663be959990b371f03da7e74
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
mod_perl-1.99_16-4.5.src.rpm     MD5: ef24c627d47dc3d60d0bde85403517fb
 
IA-32:
mod_perl-1.99_16-4.5.i386.rpm     MD5: 5e63180e9f49603b9a7eea1d1a436f66
mod_perl-devel-1.99_16-4.5.i386.rpm     MD5: 1547f7f7bb7203623e0e047af674db00
 
IA-64:
mod_perl-1.99_16-4.5.ia64.rpm     MD5: 776b91d6d9f1f6bfabde74adf613ed60
mod_perl-devel-1.99_16-4.5.ia64.rpm     MD5: d1fe40da7d74a8d049bbe79b2a52d53a
 
x86_64:
mod_perl-1.99_16-4.5.x86_64.rpm     MD5: 8f98dc9f7ea3a2ff88e9ecc748486836
mod_perl-devel-1.99_16-4.5.x86_64.rpm     MD5: 0f4ebf1d9ad592316fe2f5941b72ee02
 
Red Hat Enterprise Linux ES (v. 4.5.z)

SRPMS:
mod_perl-1.99_16-4.5.src.rpm     MD5: ef24c627d47dc3d60d0bde85403517fb
 
IA-32:
mod_perl-1.99_16-4.5.i386.rpm     MD5: 5e63180e9f49603b9a7eea1d1a436f66
mod_perl-devel-1.99_16-4.5.i386.rpm     MD5: 1547f7f7bb7203623e0e047af674db00
 
IA-64:
mod_perl-1.99_16-4.5.ia64.rpm     MD5: 776b91d6d9f1f6bfabde74adf613ed60
mod_perl-devel-1.99_16-4.5.ia64.rpm     MD5: d1fe40da7d74a8d049bbe79b2a52d53a
 
x86_64:
mod_perl-1.99_16-4.5.x86_64.rpm     MD5: 8f98dc9f7ea3a2ff88e9ecc748486836
mod_perl-devel-1.99_16-4.5.x86_64.rpm     MD5: 0f4ebf1d9ad592316fe2f5941b72ee02
 
Red Hat Enterprise Linux WS (v. 3)

SRPMS:
mod_perl-1.99_09-12.ent.src.rpm     MD5: 0171ede91bda294c9be41a393f5cb6d4
 
IA-32:
mod_perl-1.99_09-12.ent.i386.rpm     MD5: 7a27f7eeab936185438be6dc21b9f163
mod_perl-devel-1.99_09-12.ent.i386.rpm     MD5: c03fca36402721ef0f24a14a0349eb3e
 
IA-64:
mod_perl-1.99_09-12.ent.ia64.rpm     MD5: 5f64caab9566ec78fea2f49925dcb66c
mod_perl-devel-1.99_09-12.ent.ia64.rpm     MD5: c8841a63e4054afa07076bf719f6f1cc
 
x86_64:
mod_perl-1.99_09-12.ent.x86_64.rpm     MD5: 2a5a9082da94bda6b7a798bfad7ebd29
mod_perl-devel-1.99_09-12.ent.x86_64.rpm     MD5: 53529e39663be959990b371f03da7e74
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
mod_perl-1.99_16-4.5.src.rpm     MD5: ef24c627d47dc3d60d0bde85403517fb
 
IA-32:
mod_perl-1.99_16-4.5.i386.rpm     MD5: 5e63180e9f49603b9a7eea1d1a436f66
mod_perl-devel-1.99_16-4.5.i386.rpm     MD5: 1547f7f7bb7203623e0e047af674db00
 
IA-64:
mod_perl-1.99_16-4.5.ia64.rpm     MD5: 776b91d6d9f1f6bfabde74adf613ed60
mod_perl-devel-1.99_16-4.5.ia64.rpm     MD5: d1fe40da7d74a8d049bbe79b2a52d53a
 
x86_64:
mod_perl-1.99_16-4.5.x86_64.rpm     MD5: 8f98dc9f7ea3a2ff88e9ecc748486836
mod_perl-devel-1.99_16-4.5.x86_64.rpm     MD5: 0f4ebf1d9ad592316fe2f5941b72ee02
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

240423 - CVE-2007-1349 mod_perl PerlRun denial of service


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/