libapache-mod-jk 1:1.2.37-4+deb8u1build0.15.04.1 source package in Ubuntu

Changelog

libapache-mod-jk (1:1.2.37-4+deb8u1build0.15.04.1) vivid-security; urgency=medium

  * fake sync from Debian

libapache-mod-jk (1:1.2.37-4+deb8u1) jessie-security; urgency=high

  * Team upload.
  * Add CVE-2014-8111.patch. (Closes: #783233)
    It was discovered that a JkUnmount rule for a subtree of a previous JkMount
    rule could be ignored. This could allow a remote attacker to potentially
    access a private artifact in a tree that would otherwise not be accessible
    to them.
    - Add option to control handling of multiple adjacent slashes in mount and
      unmount. New default is collapsing the slashes only in unmount. Before
      this change, adjacent slashes were never collapsed, so most mounts and
      unmounts didn't match for URLs with multiple adjacent slashes.
    - Configuration is done via new JkOption for Apache
      (values "CollapseSlashesAll", "CollapseSlashesNone" or
      "CollapseSlashesUnmount").

 -- Steve Beattie <email address hidden>  Thu, 04 Jun 2015 10:39:35 -0700