Re: libapache-mod-jk: CVE-2014-8111

2015-05-25 Thread Salvatore Bonaccorso
Hi Markus, On Mon, May 25, 2015 at 05:10:48PM +0200, Markus Koschany wrote: > Hello Salvatore, > > On 25.05.2015 09:21, Salvatore Bonaccorso wrote: > [...] > >> I think the issue warrants a DSA since it is remotely exploitable > >> although the severity and impact are probably only moderate for m

Re: libapache-mod-jk: CVE-2014-8111

2015-05-25 Thread Markus Koschany
Hello Salvatore, On 25.05.2015 09:21, Salvatore Bonaccorso wrote: [...] >> I think the issue warrants a DSA since it is remotely exploitable >> although the severity and impact are probably only moderate for most setups. > > Sourcewise the debdiffs looks good to me. But no I'm not really > famila

Re: libapache-mod-jk: CVE-2014-8111

2015-05-25 Thread Salvatore Bonaccorso
Hello Markus, On Mon, May 25, 2015 at 12:35:04AM +0200, Markus Koschany wrote: > Hello security team, > > I have prepared two security updates for libapache-mod-jk which is > affected by CVE-2014-8111 [1] in Jessie and Wheezy. This is Debian bug > #783233 [2]. Thanks for preparing the update. >