shield Security update for apache2-mod_jk

slessp4-apache2-mod_jk-13888

This update for apache2-mod_jk fixes the following issues: Security issues fixed: - CVE-2018-11759: Fixed connector path traversal due to mishandled HTTP requests in httpd (bsc#1114612). - CVE-2014-8111: Apache Tomcat Connectors (mod_jk) ignored JkUnmount rules for subtrees of previous JkMount rules, which allowed remote attackers to access otherwise restricted artifacts via unspecified vectors (bsc#927845).

• Release Date
  Dec 3 2018
• References
  Bugzilla: 927845, 1114612
  CVEs: CVE-2018-11759, CVE-2014-8111
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64

• Packages
  apache2-mod_jk
  Connectors between Apache and Tomcat Servlet Container

  1.2.40-0.2.5.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 i586

• Packages
  apache2-mod_jk
  Connectors between Apache and Tomcat Servlet Container

  1.2.40-0.2.5.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 ia64

• Packages
  apache2-mod_jk
  Connectors between Apache and Tomcat Servlet Container

  1.2.40-0.2.5.1 lock rpm lock src

SUSE Linux Enterprise Server 11.4 s390x

• Packages
  apache2-mod_jk
  Connectors between Apache and Tomcat Servlet Container

  1.2.40-0.2.5.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  apache2-mod_jk
  Connectors between Apache and Tomcat Servlet Container

  1.2.40-0.2.5.1 lock rpm lock src