mod_wsgi: Privilege escalation

mod_wsgi: Privilege escalation A vulnerability in mod_wsgi could lead to privilege escalation. mod_wsgi 2016-12-30 2016-12-30: 1 536270 local, remote 4.3.0 4.3.0

mod_wsgi is an Apache2 module for running Python WSGI applications.

mod_wsgi, when creating a daemon process group, does not properly handle dropping group privileges.

Context-dependent attackers could escalate privileges due to the improper handling of group privileges.

There is no known workaround at this time.

All mod_wsgi users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=www-apache/mod_wsgi-4.3.0"

CVE-2014-8583 whissi b-man