[ubuntu/trusty-updates] uwsgi 1.9.17.1-5ubuntu0.1 (Accepted)

Mon Oct 1 13:28:16 UTC 2018

uwsgi (1.9.17.1-5ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Directory traversal
    - debian/patches/CVE-2018-7490.patch: enforce php default document_root
      behaviour, to not show external files
    - CVE-2018-7490
  * SECURITY UPDATE: Stack buffer overflow in uwsgi_expand_path()
    - debian/patches/CVE-2018-6758.patch: improve uwsgi_expand_path() to
      sanitize input, avoiding stack corruption and potential security issue
    - CVE-2018-6758

Date: 2018-09-28 16:01:15.339005+00:00
Changed-By: Mike Salvatore <mike.salvatore at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/uwsgi/1.9.17.1-5ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.