-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 14 Oct 2024 11:57:47 -0700
Source: libapache-mod-jk
Architecture: source
Version: 1:1.2.48-1+deb11u2
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1082713
Changes:
libapache-mod-jk (1:1.2.48-1+deb11u2) bullseye-security; urgency=high
.
* Non-maintainer upload by the Debian LTS team.
* CVE-2024-46544: An issue with incorrect default permissions could have
allowed local users to view and modify shared memory containing mod_jk's
configuration, which may have potentially led to information disclosure
and/or a denial of service attack. (Closes: #1082713)
Checksums-Sha1:
63154764e64c50105aaceeda45873214e4fa0475 2425 libapache-mod-jk_1.2.48-1+deb11u2.dsc
d5cec3b63d6b2e21b5ffc0e43102f85a177ddd89 3665280 libapache-mod-jk_1.2.48.orig.tar.gz
2a90717c43d82ffa88ea981a8ce1cd0f411fa9bb 873 libapache-mod-jk_1.2.48.orig.tar.gz.asc
757504f4afc85b84e2147bea3a4aca8acf7f74d9 61936 libapache-mod-jk_1.2.48-1+deb11u2.debian.tar.xz
336911659661fc5e85647cc6ae4a2b8bd5e6b17f 10343 libapache-mod-jk_1.2.48-1+deb11u2_amd64.buildinfo
Checksums-Sha256:
5e1d7cc3062254e69c9e5493f92585c9211f6b15cb70e353bf04a74f5b555df5 2425 libapache-mod-jk_1.2.48-1+deb11u2.dsc
cb1b360ba0a12b2dbec119b60f561e9f657ed75df8188e5d902534b56b908e97 3665280 libapache-mod-jk_1.2.48.orig.tar.gz
8190505db050b865fcd86801d37e560fa5c8364adcc973fe686a64c8a22e32c1 873 libapache-mod-jk_1.2.48.orig.tar.gz.asc
b44fd2bb5a3491b411a5e057741dacf71f157cee8345aac82491c2ed689324ad 61936 libapache-mod-jk_1.2.48-1+deb11u2.debian.tar.xz
645d36f80c61a134599764d224aab66d7c4a8342ab5e6f894abd7c786873f4d9 10343 libapache-mod-jk_1.2.48-1+deb11u2_amd64.buildinfo
Files:
f0169b6bf6c569e44a42602d55e1840f 2425 httpd optional libapache-mod-jk_1.2.48-1+deb11u2.dsc
2a268c9867e808ff1c2c815030c05ad7 3665280 httpd optional libapache-mod-jk_1.2.48.orig.tar.gz
15002a565cc46e52c70419ba24b28f3c 873 httpd optional libapache-mod-jk_1.2.48.orig.tar.gz.asc
513baeb5e270ac94aa682db9ecdd997a 61936 httpd optional libapache-mod-jk_1.2.48-1+deb11u2.debian.tar.xz
6c0a644953fe63d194a3f8993740c81a 10343 httpd optional libapache-mod-jk_1.2.48-1+deb11u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=rfNI
-----END PGP SIGNATURE-----
Attachment:
pgpNcSgEzUp1t.pgp
Description: PGP signature