-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2018-50566f0a39 2018-03-15 14:31:56.538271 --------------------------------------------------------------------------------
Name : uwsgi Product : Fedora EPEL 7 Version : 2.0.16 Release : 1.el7 URL : https://github.com/unbit/uwsgi Summary : Fast, self-healing, application container server Description : uWSGI is a fast (pure C), self-healing, developer/sysadmin-friendly application container server. Born as a WSGI-only server, over time it has evolved in a complete stack for networked/clustered web applications, implementing message/object passing, caching, RPC and process management. It uses the uwsgi (all lowercase, already included by default in the Nginx and Cherokee releases) protocol for all the networking/interprocess communications. Can be run in preforking mode, threaded, asynchronous/evented and supports various form of green threads/co-routine (like uGreen and Fiber). Sysadmin will love it as it can be configured via command line, environment variables, xml, .ini and yaml files and via LDAP. Being fully modular can use tons of different technology on top of the same core.
-------------------------------------------------------------------------------- Update Information:
Updated to 2.0.16 which includes fix for CVE-2018-6758 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #1542819 - CVE-2018-6758 uwsgi: Stack-based buffer overflow in core/utils.c:uwsgi_expand_path() can lead to crash and potential code execution [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1542819 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update uwsgi' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/htm...
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org