Medium RLSA-2024:7457 1 CVE

Moderate: mod_jk bug fix update

Published May 7, 2025 · Updated Oct 7, 2025

Ecosystem: Rocky Linux

Summary

The mod_jk module is an Apache HTTP Server plug-in that enables the Apache HTTP Server to connect with the Apache Tomcat servlet engine.

Bug Fix(es):

* Rebase to upstream 1.2.50 release (JIRA:Rocky Linux-58855)

Security fix(es):

* mod_jk: information Disclosure / DoS (CVE-2024-46544) (JIRA:Rocky Linux-59800)

Fixed packages 1

Release	Package	Fixed in
Rocky Linux · 9	mod_jk	0:1.2.50-1.el9_4.1

Vulnerabilities 1

Medium 5.9

CVE-2024-46544

Apache Tomcat Connectors: mod_jk: local users can view and modify configuration

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service. This issue affects Apache Tomcat Con…

Apache Software Foundation Apache Tomcat Connectors libapache-mod-jk libapache-mod-jk Debian Ubuntu

Sep 23, 2024

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2314194