uwsgi (2.0.12-5ubuntu3.2) xenial-security; urgency=medium
* SECURITY UPDATE: Directory traversal
- debian/patches/CVE-2018-7490.patch: enforce php default document_root
behaviour, to not show external files
- CVE-2018-7490
* SECURITY UPDATE: Stack buffer overflow in uwsgi_expand_path()
- debian/patches/CVE-2018-6758.patch: improve uwsgi_expand_path() to
sanitize input, avoiding stack corruption and potential security issue
- CVE-2018-6758
Date: 2018-09-28 15:31:12.640116+00:00
Changed-By: Mike Salvatore <[email protected]>
https://launchpad.net/ubuntu/+source/uwsgi/2.0.12-5ubuntu3.2
Sorry, changesfile not available.
--
Xenial-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes
