Lucene search

K
osvGoogleOSV:DSA-2937-1
HistoryMay 27, 2014 - 12:00 a.m.

mod-wsgi - security update

2014-05-2700:00:00
Google
osv.dev
6

0.071 Low

EPSS

Percentile

94.0%

Two security issues have been found in the Python WSGI adapter module
for Apache:

  • CVE-2014-0240
    Robert Kisteleki discovered a potential privilege escalation in
    daemon mode. This is not exploitable with the kernel used in Debian
    7.0/wheezy.
  • CVE-2014-0242
    Buck Golemon discovered that incorrect memory handling could lead to
    information disclosure when processing Content-Type headers.

For the oldstable distribution (squeeze), these problems have been fixed in
version 3.3-2+deb6u1.

For the stable distribution (wheezy), these problems have been fixed in
version 3.3-4+deb7u1.

For the testing distribution (jessie), these problems have been fixed in
version 3.5-1.

For the unstable distribution (sid), these problems have been fixed in
version 3.5-1.

We recommend that you upgrade your mod-wsgi packages.

CPENameOperatorVersion
mod-wsgieq3.3-4