Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2014-8583: mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors. 1111034: CVE-2014-8583 mod_wsgi: failure to handle errors when attempting to drop group privileges
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | mod_wsgi | 0:3.4-12.amzn2.0.1 |
| Amazon Linux · 2 | mod_wsgi-debuginfo | 0:3.4-12.amzn2.0.1 |
Vulnerabilities 1
-
Unscored —
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2014-8583.html