OPENSUSE-SU-2024:10488-1 apache2-mod_jk-1.2.41-1.5 on GA media

These are all security issues fixed in the apache2-modjk-1.2.41-1.5 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2014-8111

Apache Tomcat Connectors modjk before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors...

Fixed in Apache Tomcat JK Connector 1.2.41

Important: Information disclosure CVE-2014-8111 Multiple adjacent slashes in a request URI were not collapsed to a single slash before comparing the request URI to the configured mount and unmount patterns. It is therefore possible for an attacker to use a request URI containing multiple adjacent...