[ubuntu/focal-security] awstats 7.6+dfsg-2ubuntu0.20.04.1 (Accepted)

[Avital Ostromich]

awstats (7.6+dfsg-2ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Path traversal
    - debian/patches/CVE-2020-29600.patch: Disable parsing arbitrary files in
      wwwroot/cgi-bin/awstats.pl, introduced by an incomplete fix for
      CVE-2017-1000501.
    - CVE-2020-29600
  * SECURITY UPDATE: Path traversal 
    - debian/patches/CVE-2020-35176.patch: Disable parsing /etc/ dir in
      wwwroot/cgi-bin/awstats.pl, introduced by an incomplete fix for
      CVE-2017-1000501.
    - CVE-2020-35176

Date: 2021-04-23 12:46:10.420954+00:00
Changed-By: Avital Ostromich <avital.ostromich at canonical.com>
https://launchpad.net/ubuntu/+source/awstats/7.6+dfsg-2ubuntu0.20.04.1
-------------- next part --------------
Sorry, changesfile not available.