SUSE-SU-2018:3970-1

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2018:3970-1

Related

Published

2018-12-03T14:36:00Z

Modified

2018-12-03T14:36:00Z

Summary

Security update for apache2-mod_jk

Details

This update for apache2-mod_jk fixes the following issues:

Security issues fixed:

CVE-2018-11759: Fixed connector path traversal due to mishandled HTTP requests in httpd (bsc#1114612).
CVE-2014-8111: Apache Tomcat Connectors (mod_jk) ignored JkUnmount rules for subtrees of previous JkMount rules, which allowed remote attackers to access otherwise restricted artifacts via unspecified vectors (bsc#927845).

References

Affected packages

Name: apache2-mod_jk
Purl: purl:rpm/suse/apache2-mod_jk&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.40-0.2.5.1

{
    "binaries": [
        {
            "apache2-mod_jk": "1.2.40-0.2.5.1"
        }
    ]
}

Name: apache2-mod_jk
Purl: purl:rpm/suse/apache2-mod_jk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.40-0.2.5.1

{
    "binaries": [
        {
            "apache2-mod_jk": "1.2.40-0.2.5.1"
        }
    ]
}