Red Hat Security AdvisoryRHSA-2014:1091
mod_wsgi security update
Released 2014-08-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) mod_wsgi-3.4-12.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) mod_wsgi-3.4-12.el7_0
- Red Hat Enterprise Linux Server (v. 7) mod_wsgi-3.4-12.el7_0
- Red Hat Enterprise Linux Workstation (v. 7) mod_wsgi-3.4-12.el7_0
Fixes 1 record
Priority LOW 28
The mod_wsgi module before 3.5 for Apache, when daemon mode is enabled, does not properly handle error codes returned by setuid when run on certain Linux kernels, which allows local users to gain privileges via vectors r…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00411 · Published 2014-05-27 · Partial fix CWE-264
