--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-d801e05f92
2018-09-11 13:47:14.802851
--------------------------------------------------------------------------------
Name : uwsgi
Product : Fedora EPEL 6
Version : 2.0.17.1
Release : 1.el6
URL :
https://github.com/unbit/uwsgi
Summary : Fast, self-healing, application container server
Description :
uWSGI is a fast (pure C), self-healing, developer/sysadmin-friendly
application container server. Born as a WSGI-only server, over time it has
evolved in a complete stack for networked/clustered web applications,
implementing message/object passing, caching, RPC and process management.
It uses the uwsgi (all lowercase, already included by default in the Nginx
and Cherokee releases) protocol for all the networking/interprocess
communications. Can be run in preforking mode, threaded,
asynchronous/evented and supports various form of green threads/co-routine
(like uGreen and Fiber). Sysadmin will love it as it can be configured via
command line, environment variables, xml, .ini and yaml files and via LDAP.
Being fully modular can use tons of different technology on top of the same
core.
--------------------------------------------------------------------------------
Update Information:
--- - Modernize and generalize building of Python subpackages: - replace
python with python2 - use appropriate macros for when refering to Python 3 -
prefix Python-dependent plugins with the version of Python they are built
with - Also build Python 3 subpackages for the other Python 3 version in EPEL7
--- - Build Python 3 version(s) of gevent plugin on Fedora and EPEL7 - Build
Python 3 version of greenlet plugin on Fedora and EPEL7 - Build Python 2 version
of greenlet plugin on EPEL7 - Always build Python 3 version of tornado plugin
when building with Python 3 (drop python3_tornado build conditional) --- -
Latest upstream (rhbz#1549354) - Enable uwsgi-plugin-coroae on EL7 - Use systemd
tmpfiles to create /run/uwsgi with group write permissions (rhbz#1427303) - Use
/var/run/uwsgi when not using systemd - Build with versioned python command -
Remove %%config from systemd unit file - Disable greenlet plugin on EL7
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1549439 - CVE-2018-7490 uWSGI: Mishandled DOCUMENT_ROOT check with use of
--php-docroot option allows for directory traversal [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1549439
[ 2 ] Bug #1427303 - Add group write permission to socket directory
https://bugzilla.redhat.com/show_bug.cgi?id=1427303
[ 3 ] Bug #1549354 - uwsgi-2.0.17.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1549354
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update uwsgi' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------