-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 17 Mar 2018 09:05:43 +0100 Source: uwsgi Binary: uwsgi uwsgi-dbg uwsgi-src uwsgi-core uwsgi-emperor uwsgi-plugins-all uwsgi-infrastructure-plugins uwsgi-app-integration-plugins uwsgi-mongodb-plugins uwsgi-plugin-alarm-curl uwsgi-plugin-alarm-xmpp uwsgi-plugin-curl-cron uwsgi-plugin-emperor-pg uwsgi-plugin-glusterfs uwsgi-plugin-rados uwsgi-plugin-rbthreads uwsgi-plugin-fiber uwsgi-plugin-geoip uwsgi-plugin-graylog2 uwsgi-plugin-gevent-python uwsgi-plugin-greenlet-python uwsgi-plugin-asyncio-python uwsgi-plugin-asyncio-python3 uwsgi-plugin-tornado-python uwsgi-plugin-gccgo uwsgi-plugin-jvm-openjdk-8 uwsgi-plugin-jwsgi-openjdk-8 uwsgi-plugin-ring-openjdk-8 uwsgi-plugin-servlet-openjdk-8 uwsgi-plugin-ldap uwsgi-plugin-lua5.1 uwsgi-plugin-lua5.2 uwsgi-plugin-luajit uwsgi-plugin-mono uwsgi-plugin-psgi uwsgi-plugin-python uwsgi-plugin-python3 uwsgi-plugin-rack-ruby2.3 uwsgi-plugin-router-access uwsgi-plugin-sqlite3 uwsgi-plugin-v8 uwsgi-plugin-php uwsgi-plugin-xslt libapache2-mod-proxy-uwsgi libapache2-mod-proxy-uwsgi-dbg libapache2-mod-uwsgi libapache2-mod-uwsgi-dbg libapache2-mod-ruwsgi libapache2-mod-ruwsgi-dbg python-uwsgidecorators python3-uwsgidecorators uwsgi-extra Architecture: all Version: 2.0.14+20161117-3+deb9u2 Distribution: stretch-security Urgency: high Maintainer: all Build Daemon (x86-bm-01) Changed-By: Salvatore Bonaccorso Description: libapache2-mod-proxy-uwsgi - uwsgi proxy module for Apache2 (mod_uwsgi) libapache2-mod-proxy-uwsgi-dbg - debugging symbols for Apache2 mod_proxy_uwsgi libapache2-mod-ruwsgi - uwsgi module for Apache2 (mod_Ruwsgi) libapache2-mod-ruwsgi-dbg - debugging symbols for Apache2 mod_Ruwsgi libapache2-mod-uwsgi - uwsgi module for Apache2 (mod_uwsgi) libapache2-mod-uwsgi-dbg - debugging symbols for Apache2 mod_uwsgi python-uwsgidecorators - module of decorators for elegant access to uWSGI API (Python 2) python3-uwsgidecorators - module of decorators for elegant access to uWSGI API (Python 3) uwsgi - fast, self-healing application container server uwsgi-app-integration-plugins - plugins for integration of uWSGI and application uwsgi-core - fast, self-healing application container server (core) uwsgi-dbg - debugging symbols for uWSGI server and it's plugins uwsgi-emperor - fast, self-healing application container server (emperor scripts) uwsgi-extra - fast, self-healing application container server (extra files) uwsgi-infrastructure-plugins - infrastructure plugins for uWSGI uwsgi-mongodb-plugins - MongoDB/GridFS plugins for uWSGI uwsgi-plugin-alarm-curl - cURL alarm plugin for uWSGI uwsgi-plugin-alarm-xmpp - XMPP alarm plugin for uWSGI uwsgi-plugin-asyncio-python - asyncio plugin for uWSGI (Python 2) uwsgi-plugin-asyncio-python3 - asyncio plugin for uWSGI (Python 3) uwsgi-plugin-curl-cron - cron cURL plugin for uWSGI uwsgi-plugin-emperor-pg - Emperor PostgreSQL plugin for uWSGI uwsgi-plugin-fiber - Fiber plugin for uWSGI uwsgi-plugin-gccgo - GNU Go plugin for uWSGI uwsgi-plugin-geoip - GeoIP plugin for uWSGI uwsgi-plugin-gevent-python - gevent plugin for uWSGI (Python 2) uwsgi-plugin-glusterfs - GlusterFS storage plugin for uWSGI uwsgi-plugin-graylog2 - graylog2 plugin for uWSGI uwsgi-plugin-greenlet-python - greenlet plugin for uWSGI (Python 2) uwsgi-plugin-jvm-openjdk-8 - Java plugin for uWSGI (OpenJDK 8) uwsgi-plugin-jwsgi-openjdk-8 - JWSGI plugin for uWSGI (OpenJDK 8) uwsgi-plugin-ldap - LDAP plugin for uWSGI uwsgi-plugin-lua5.1 - Lua WSAPI plugin for uWSGI (Lua 5.1) uwsgi-plugin-lua5.2 - Lua WSAPI plugin for uWSGI (Lua 5.2) uwsgi-plugin-luajit - Lua WSAPI plugin for uWSGI (LuaJIT) uwsgi-plugin-mono - Mono/ASP.NET plugin for uWSGI uwsgi-plugin-php - PHP plugin for uWSGI uwsgi-plugin-psgi - Perl PSGI plugin for uWSGI uwsgi-plugin-python - WSGI plugin for uWSGI (Python 2) uwsgi-plugin-python3 - WSGI plugin for uWSGI (Python 3) uwsgi-plugin-rack-ruby2.3 - Rack plugin for uWSGI (${uwsgi:RubyKind}) uwsgi-plugin-rados - Ceph/RADOS storage plugin for uWSGI uwsgi-plugin-rbthreads - Ruby native threads plugin for uWSGI (${uwsgi:RubyDefaultkind}) uwsgi-plugin-ring-openjdk-8 - Closure/Ring plugin for uWSGI (OpenJDK 8) uwsgi-plugin-router-access - Access router plugin for uWSGI uwsgi-plugin-servlet-openjdk-8 - JWSGI plugin for uWSGI (OpenJDK 8) uwsgi-plugin-sqlite3 - SQLite 3 configurations plugin for uWSGI uwsgi-plugin-tornado-python - tornado plugin for uWSGI (Python 2) uwsgi-plugin-v8 - JavaScript V8 plugin for uWSGI uwsgi-plugin-xslt - XSLT request plugin for uWSGI uwsgi-plugins-all - all available plugins for uWSGI uwsgi-src - sources for uWSGI plugins Closes: 891639 Changes: uwsgi (2.0.14+20161117-3+deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * enforce php default document_root behaviour, to not show external files (CVE-2018-7490) (Closes: #891639) Checksums-Sha1: ea03e39f93a1f22a69e785671b3fc84cdb4ea1da 36712 python-uwsgidecorators_2.0.14+20161117-3+deb9u2_all.deb d117efaf8c9c349fabe1159ee1606448db2d41cd 36830 python3-uwsgidecorators_2.0.14+20161117-3+deb9u2_all.deb baeab73fec8f5fac778f2ef6271558eb01cac406 51218 uwsgi-extra_2.0.14+20161117-3+deb9u2_all.deb 28b285e764e02e120f69844ddf2be382b690210d 306926 uwsgi-src_2.0.14+20161117-3+deb9u2_all.deb d650c38f8c14364d8c1546189ef94d6d9ef075f7 29509 uwsgi_2.0.14+20161117-3+deb9u2_all.buildinfo Checksums-Sha256: eddb067442a779dea671da9ec045bb6ea777f8e847731ddcf720639cc86ab8d0 36712 python-uwsgidecorators_2.0.14+20161117-3+deb9u2_all.deb b9ebbcbb1858be8d13c8644c27bb88e0530c09a6b45d94ee84a8f90c05fc5c4f 36830 python3-uwsgidecorators_2.0.14+20161117-3+deb9u2_all.deb 48aa78cc4c7243f84a52b7dcd7c59a54227dcd1693743410b31584aaf0cc8ed6 51218 uwsgi-extra_2.0.14+20161117-3+deb9u2_all.deb b4a5ca2e5c5a614e05513988179ac8aadb1316dd19218fc88e713186e725d671 306926 uwsgi-src_2.0.14+20161117-3+deb9u2_all.deb c1b0493b4fe03e4e720e497bb6bdd45178ad53e62da5f5cc8495b596c06cadbb 29509 uwsgi_2.0.14+20161117-3+deb9u2_all.buildinfo Files: e031a79ebcff560643266cb390862ffd 36712 python extra python-uwsgidecorators_2.0.14+20161117-3+deb9u2_all.deb 2e65d5ac8b60dc37bf61aa0ae06ed940 36830 python extra python3-uwsgidecorators_2.0.14+20161117-3+deb9u2_all.deb 898fda97b6c3f62ae8a599ed383c94ed 51218 web extra uwsgi-extra_2.0.14+20161117-3+deb9u2_all.deb 238f71cf2ada1c1d6186f97987e544c4 306926 libdevel extra uwsgi-src_2.0.14+20161117-3+deb9u2_all.deb ba31a8dfcc837609f464676ef2bb9b26 29509 web extra uwsgi_2.0.14+20161117-3+deb9u2_all.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+Q4wXU5EpnqJTTdCyncTpe5gVMoFAlqtN+MACgkQyncTpe5g VMp8FQ//epNrQkRmAVSOSbcykYvPrpR8RJ9FqtB8xaEfdvz0mId7LW57lG/I4yH7 qXY3O8dpbTwzwT+vct85Y7KXJP49Ym4gp1Y4e/IrDsSFa1hRw58mis8LxA5NWRrd rb9eu7v5KFe90y0Yb2G03c/Ig0Imd2emRIvgg8mq82HgyyRzi/olkM0KXFOJIvBB yTZ8kDgy07LhU/FLpR/ycvkMPPY3qT4dar6vT2PqJxBbNjwW5M3xZfYPzNwbCn6K I9hXg6CXjV8B2V3Wnao0w0NSUS8zxDcayD4DGLFbQEXBCy71me7haMYFKMmecUjQ 1y7NYm0Co+5R+8asPfqAqAao9GumG/xIyt7yJX3+odl4vHJ4vAXQVqOT6hPIOf6n 1NAcRFnM9rUu4ZtlZJS9siPqoDetRTGy5sWYUQRbAduf+I8QmqDhPiyzYFmquwfn BvuBlSSkNb77Jaj8ODISm1Ldkqy6fo4VuMdK7Vy2GfCIXmhS9IBOWZhXIJnJ5Y4j yiy04PWlkbc0VVWAnou6b8jE8fT0+XvE+pHZ61G8yeMD6U43UEwodMJJ+aObxje6 bJ8S1Bt/Gs+8qrTt2sWD7fbRMfgUFpo71qPsl5hp0Qvl++ugRAh1HxQ+rgK4tan+ 42qqqb8oP8kJk2uEVxWidEP8SSWBpsrszVcInidau2RMnBYEdIA= =G09H -----END PGP SIGNATURE-----