Red Hat Security AdvisoryRHSA-2014:0789
python27-mod_wsgi and python33-mod_wsgi security update
Released 2014-06-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) python27-mod_wsgi-3.4-12.el6, python33-mod_wsgi-3.4-14.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7) python27-mod_wsgi-3.4-13.el7, python33-mod_wsgi-3.4-13.el7
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.3) python27-mod_wsgi-3.4-12.el6, python33-mod_wsgi-3.4-14.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4) python27-mod_wsgi-3.4-12.el6, python33-mod_wsgi-3.4-14.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) python27-mod_wsgi-3.4-12.el6, python33-mod_wsgi-3.4-14.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7) python27-mod_wsgi-3.4-13.el7, python33-mod_wsgi-3.4-13.el7
Fixes 1 record
Priority LOW 28
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors r…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00411 · Published 2014-05-27 · Partial fix CWE-264
