uwsgi (1.9.17.1-5ubuntu0.1) trusty-security; urgency=medium
* SECURITY UPDATE: Directory traversal
- debian/patches/CVE-2018-7490.patch: enforce php default document_root
behaviour, to not show external files
- CVE-2018-7490
* SECURITY UPDATE: Stack buffer overflow in uwsgi_expand_path()
- debian/patches/CVE-2018-6758.patch: improve uwsgi_expand_path() to
sanitize input, avoiding stack corruption and potential security issue
- CVE-2018-6758
Date: 2018-09-28 16:01:15.339005+00:00
Changed-By: Mike Salvatore <[email protected]>
https://launchpad.net/ubuntu/+source/uwsgi/1.9.17.1-5ubuntu0.1
Sorry, changesfile not available.
--
Trusty-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/trusty-changes
