This update adds the following packages to the SLE 12 SP1 backports project:

apache-rpm-macros 20150717
apache2-mod_wsgi 4.4.8
python-Flask 0.10.1
python-Pygments 1.6
python-Sphinx 1.2b3
python-Werkzeug 0.10.4
python-itsdangerous 0.24
python-nose 1.3.6


              

References

---

• CVE: CVE-2014-0240
• Bugzilla: 939717 Apache:Modules/apache2-mod_wsgi: Bug missing python3
• Bugzilla: 915666 Apache source is inconsistent
• Bugzilla: 904409 Rpm macros lack definition of user/group that is to be used by extensions
• Bugzilla: 883229 VUL-1: apache2-mod_wsgi: Possible DoS caused by off-by-one in setgroups
• Bugzilla: 878550 VUL-0: CVE-2014-0240: apache2-mod_wsgi - Local privilege escalation.
• Bugzilla: 760344 https://bugzilla.opensuse.org/show_bug.cgi?id=760344
• Bugzilla: 673937 apache2: provide rpm macros file for 3rd party modules
• Bugzilla: 441794 Dozens of python packages fail in Factory due to filelist problem

Packages

---

• apache-rpm-macros-20150717-3.1

• apache2-mod_wsgi-4.4.8-3.1

• python-Flask-0.10.1-3.1

• python-Pygments-1.6-3.1

• python-Sphinx-1.2b3-3.1

• python-Werkzeug-0.10.4-3.1

• python-itsdangerous-0.24-3.1

• python-nose-1.3.6-3.1