Ubuntu
libapache-mod-jk package

libapache-mod-jk 1:1.2.46-1ubuntu0.1 source package in Ubuntu

Changelog

libapache-mod-jk (1:1.2.46-1ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Authentication bypass in mod_jk
    - debian/patches/CVE-2023-41081.patch: Remove support for implicit mapping
      of requests to workers.
    - CVE-2023-41081

 -- Octavio Galland <email address hidden>  Mon, 10 Jun 2024 09:16:11 -0300

Upload details

Uploaded by:
Octavio Galland
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
httpd
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe web
Focal security universe web

Downloads

File Size SHA-256 Checksum
libapache-mod-jk_1.2.46.orig.tar.gz 3.1 MiB 7e1d520e1d1dacd042087ae52be7aae47a093b93cf26931827724aa8ab66cbe9
libapache-mod-jk_1.2.46-1ubuntu0.1.debian.tar.xz 59.9 KiB 0ada7bddb66499335e5ef741d83f4030e4a64570289bbe8c99b2efe0cef986cc
libapache-mod-jk_1.2.46-1ubuntu0.1.dsc 2.2 KiB 8a489b374873de76fc550e0cd45584e4a17926497a25c7bef1cee78eaa404f83

View changes file

Binary packages built by this source

libapache-mod-jk-doc: Documentation of libapache2-mod-jk package

 Documentation and examples of the Apache jk connector for the Tomcat
 Java servlet engine.
 .
 For uptodate documentation about Tomcat connectors please take a look
 at the home page at http://tomcat.apache.org/connectors-doc/.

libapache2-mod-jk: Apache 2 connector for the Tomcat Java servlet engine

 Apache Tomcat is the reference implementation for the Java Servlet and
 JavaServer Pages (JSP) specification from the Apache Jakarta project.
 .
 This package contains an Apache 2 module (mod_jk) to forward requests
 from Apache to Tomcat using the AJP 1.3 or 1.4 protocol. It can either
 talk to Tomcat on the local machine or to a remote engine using TCP.

libapache2-mod-jk-dbgsym: debug symbols for libapache2-mod-jk