CVE-2014-0240

Advisory

Mod-wsgi 3.5 includes a fix for CVE-2014-0240: Local privilege escalation when using daemon mode.
https://github.com/GrahamDumpleton/mod_wsgi/commit/d9d5fea585b23991f76532a9b07de7fcd3b649f4

Affected package

Affected versions

Fixed versions

Vulnerability changelog

For details on this release see:
- http://modwsgi.readthedocs.org/en/latest/release-notes/version-3.5.html

**Note that version 3.5 of mod_wsgi contains a fix for a security related issue. It is recommended that prior versions of mod_wsgi not be used.**

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0240
• http://www.securityfocus.com/bid/67532
• http://modwsgi.readthedocs.org/en/latest/release-notes/version-3.5.html
• http://blog.dscpl.com.au/2014/05/security-release-for-modwsgi-version-35.html
• http://www.openwall.com/lists/oss-security/2014/05/21/1
• http://secunia.com/advisories/60094
• http://secunia.com/advisories/59551
• http://rhn.redhat.com/errata/RHSA-2014-0789.html