MDVSA-2014:253: apache-mod_wsgi

Updated apache-mod_wsgi package fixes security vulnerability:

It was discovered that mod_wsgi incorrectly handled errors when
setting up the working directory and group access rights. A malicious
application could possibly use this issue to cause a local privilege
escalation when using daemon mode (CVE-2014-8583).

Leave a Reply