Thanks for the report; considering the WP install looks useless with this configuration, I don't think the path presence outside the root is much issue.
(I personally think the "path disclosure" issues are a bit thin at best -- if the web server really shouldn't see some paths, it ought to be configured with the OS permissions to actually only allow it to interact with what it should see.) So I'm making this public, non-security. Thanks ** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/1542560 Title: Apache incorrect building path when Alias directive argument is root ('/') To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1542560/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
