Version in base suite: 1.2.48-2+deb12u1 Base version: libapache-mod-jk_1.2.48-2+deb12u1 Target version: libapache-mod-jk_1.2.48-2+deb12u2 Base file: /srv/ftp-master.debian.org/ftp/pool/main/liba/libapache-mod-jk/libapache-mod-jk_1.2.48-2+deb12u1.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/liba/libapache-mod-jk/libapache-mod-jk_1.2.48-2+deb12u2.dsc changelog | 10 +++++ patches/0004-CVE-2024-46544.patch | 71 ++++++++++++++++++++++++++++++++++++++ patches/series | 1 3 files changed, 82 insertions(+) diff -Nru libapache-mod-jk-1.2.48/debian/changelog libapache-mod-jk-1.2.48/debian/changelog --- libapache-mod-jk-1.2.48/debian/changelog 2023-09-24 14:40:59.000000000 +0000 +++ libapache-mod-jk-1.2.48/debian/changelog 2025-02-08 20:24:47.000000000 +0000 @@ -1,3 +1,13 @@ +libapache-mod-jk (1:1.2.48-2+deb12u2) bookworm; urgency=medium + + * Fix CVE-2024-46544: + An issue with incorrect default permissions could have allowed local users + to view and modify shared memory containing mod_jk's configuration, which + may have potentially led to information disclosure and/or a denial of + service attack. (Closes: #1082713) + + -- Markus Koschany Sat, 08 Feb 2025 21:24:47 +0100 + libapache-mod-jk (1:1.2.48-2+deb12u1) bookworm; urgency=high * Fix CVE-2023-41081: diff -Nru libapache-mod-jk-1.2.48/debian/patches/0004-CVE-2024-46544.patch libapache-mod-jk-1.2.48/debian/patches/0004-CVE-2024-46544.patch --- libapache-mod-jk-1.2.48/debian/patches/0004-CVE-2024-46544.patch 1970-01-01 00:00:00.000000000 +0000 +++ libapache-mod-jk-1.2.48/debian/patches/0004-CVE-2024-46544.patch 2025-02-08 20:24:47.000000000 +0000 @@ -0,0 +1,71 @@ +From: Rainer Jung +Date: Thu, 8 Aug 2024 10:00:13 +0200 +Subject: [PATCH] Improve shared memory handling on non-Windows. + +--- + native/common/jk_shm.c | 12 ++++++------ + xdocs/miscellaneous/changelog.xml | 3 +++ + 2 files changed, 9 insertions(+), 6 deletions(-) + +diff --git a/native/common/jk_shm.c b/native/common/jk_shm.c +index 58956dc..65d9f62 100644 +--- a/native/common/jk_shm.c ++++ b/native/common/jk_shm.c +@@ -459,7 +459,7 @@ static int do_shm_open_lock(const char *fname, int attached, jk_logger_t *l) + + if (attached && jk_shmem.lockname) { + #ifdef JK_SHM_LOCK_REOPEN +- jk_shmem.fd_lock = open(jk_shmem.lockname, O_RDWR, 0666); ++ jk_shmem.fd_lock = open(jk_shmem.lockname, O_RDWR, 0600); + #else + errno = EINVAL; + #endif +@@ -483,7 +483,7 @@ static int do_shm_open_lock(const char *fname, int attached, jk_logger_t *l) + for (i = 0; i < 8; i++) { + strcpy(flkname, "/tmp/jkshmlock.XXXXXX"); + if (mktemp(flkname)) { +- jk_shmem.fd_lock = open(flkname, O_RDWR|O_CREAT|O_TRUNC, 0666); ++ jk_shmem.fd_lock = open(flkname, O_RDWR|O_CREAT|O_TRUNC, 0600); + if (jk_shmem.fd_lock >= 0) + break; + } +@@ -495,10 +495,10 @@ static int do_shm_open_lock(const char *fname, int attached, jk_logger_t *l) + #ifdef AS400_UTF8 + wptr = (char *)malloc(strlen(flkname) + 1); + jk_ascii2ebcdic((char *)flkname, wptr); +- jk_shmem.fd_lock = open(wptr, O_RDWR|O_CREAT|O_TRUNC, 0666); ++ jk_shmem.fd_lock = open(wptr, O_RDWR|O_CREAT|O_TRUNC, 0600); + free(wptr); + #else +- jk_shmem.fd_lock = open(flkname, O_RDWR|O_CREAT|O_TRUNC, 0666); ++ jk_shmem.fd_lock = open(flkname, O_RDWR|O_CREAT|O_TRUNC, 0600); + #endif + #endif + if (jk_shmem.fd_lock == -1) { +@@ -589,10 +589,10 @@ static int do_shm_open(const char *fname, int attached, + #ifdef AS400_UTF8 + wptr = (char *)malloc(strlen(jk_shmem.filename) + 1); + jk_ascii2ebcdic((char *)jk_shmem.filename, wptr); +- fd = open(wptr, O_RDWR|O_CREAT|O_TRUNC, 0666); ++ fd = open(wptr, O_RDWR|O_CREAT|O_TRUNC, 0600); + free(wptr); + #else +- fd = open(jk_shmem.filename, O_RDWR|O_CREAT|O_TRUNC, 0666); ++ fd = open(jk_shmem.filename, O_RDWR|O_CREAT|O_TRUNC, 0600); + #endif + if (fd == -1) { + jk_shmem.size = 0; +diff --git a/xdocs/miscellaneous/changelog.xml b/xdocs/miscellaneous/changelog.xml +index bb5a8ac..224bb18 100644 +--- a/xdocs/miscellaneous/changelog.xml ++++ b/xdocs/miscellaneous/changelog.xml +@@ -91,6 +91,9 @@ + socket_connect_timeout to be interpreted in units of seconds + instead of milliseconds on platforms that provide poll(). (rjung) + ++ ++ Improve shared memory handling on non-Windows. (rjung) ++ + + + diff -Nru libapache-mod-jk-1.2.48/debian/patches/series libapache-mod-jk-1.2.48/debian/patches/series --- libapache-mod-jk-1.2.48/debian/patches/series 2023-09-24 14:40:59.000000000 +0000 +++ libapache-mod-jk-1.2.48/debian/patches/series 2025-02-08 20:24:47.000000000 +0000 @@ -1,3 +1,4 @@ 0002-debianize-log-directory.patch 0003-upgrade-info-to-error-message.patch CVE-2023-41081.patch +0004-CVE-2024-46544.patch