Ubuntu alert USN-8369-2 (libapache-mod-jk)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8369-2] mod_jk regression
Date:
             
 
Thu, 23 Jul 2026 11:50:13 +0000
Message-ID:
             
 
<E1wmrwL-0003i1-Bb@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8369-2
July 23, 2026

libapache-mod-jk regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

USN-8369-1 introduced a regression in mod_jk

Software Description:
- libapache-mod-jk: Apache 2 connector for the Tomcat Java servlet engine

Details:

USN-8369-1 fixed a vulnerability in mod_jk. It was discovered that for
Ubuntu 18.04 LTS, during the update preparation phase, a previous  fix for
CVE-2023-41081 was incorrectly dropped. This update  reintroduces the fix
for CVE-2023-41081.

We apologize for the inconvenience.

Original advisory details:

 It was discovered that Apache Tomcat Connectors used incorrect default
 permissions for shared memory on Unix-like systems. A local attacker could
 possibly use this issue to view or modify mod_jk configuration data in
 shared memory, resulting in sensitive information exposure or a denial of
 service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  libapache2-mod-jk               1:1.2.41-1ubuntu0.1~esm2
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8369-2
  https://ubuntu.com/security/notices/USN-8369-1
  CVE-2023-41081, https://launchpad.net/bugs/2161580


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmph/9IACgkQcpJm3tlz
hgGsgQ//SDI9xrQJ/WidmyoSOEH5QxwlzyMjNKStQ5NWUppxDqV1z1BQbaqO6gac
ZfZm1lmtV+FXPNX7iLqhc26Skv+NtB2m3YKYreI95W276OCA8wGiVL6Ph0gQjnad
1quJpYJmsTDBUvcp/t2ZNQP/IGpsOfFl8vm2JDnP/JYVcpQD+hPhxAh3gGhh5thL
2G6v4HzIhbnrsxnZ9smFmpIex58AiBf+TxJ/21DuhOBCLneSNV4fctBz+YOgkftJ
W89Mu0fi9Wi6wFloE021yFe3vhQ0oJcE5NcUVbOaTXrqUDMx3fHyzpBM0374LJsH
N7A3nVIcUgLeE2AkWpEliDPyYHyg3cA0I3+r7OOjh40O9yv+0NfukHwf1u7J8AyX
eIa6xos6cP/X4kBBSS0FC4qrw71qEw3aKf8OylAQ+396iht32suZ1XDDphs/YYph
dz/hVeAQEfQ4OFSef9AL4/lrRYthtizq0hw8AVb9tg6nWlg+Hn7v4yS0eCF9HVrb
lPBqJdCSGbmz483AqVjJBXaBRGVIHky/qFp1mmMbHu0lGQ/hJ5kUbISNnxzXaJva
3CLsE8nsYOdHKy85hr+O/kZp6vnbZrkf37K90ygyqfPBXWy7lBnFcJtCZnkVHo7l
6ixWVhxlW65afqcy92rWWhoFjJuvCNYkfpAtHMiUQ5hunOhjTOk=
=NNg7
-----END PGP SIGNATURE-----