[ubuntu/groovy-security] awstats 7.6+dfsg-2ubuntu0.20.10.1 (Accepted)

[Avital Ostromich]

awstats (7.6+dfsg-2ubuntu0.20.10.1) groovy-security; urgency=medium

  * SECURITY UPDATE: Path traversal
    - debian/patches/CVE-2020-29600.patch: Disable parsing arbitrary files in
      wwwroot/cgi-bin/awstats.pl, introduced by an incomplete fix for
      CVE-2017-1000501.
    - CVE-2020-29600
  * SECURITY UPDATE: Path traversal 
    - debian/patches/CVE-2020-35176.patch: Disable parsing /etc/ dir in
      wwwroot/cgi-bin/awstats.pl, introduced by an incomplete fix for
      CVE-2017-1000501.
    - CVE-2020-35176

Date: 2021-04-26 15:50:09.255905+00:00
Changed-By: Avital Ostromich <avital.ostromich at canonical.com>
https://launchpad.net/ubuntu/+source/awstats/7.6+dfsg-2ubuntu0.20.10.1
-------------- next part --------------
Sorry, changesfile not available.