mod_jk 1.2.2ã€ã‚»ã‚ュリティå•é¡Œã§ãƒªãƒªãƒ¼ã‚¹å–り消ã—
å°åˆ·ã™ã‚‹ メールã§é€ã‚‹ テã‚スト HTML é›»åæ›¸ç± PDF ダウンãƒãƒ¼ãƒ‰ テã‚スト é›»åæ›¸ç± PDF クリップã—ãŸè¨˜äº‹ã‚’Myページã‹ã‚‰èªã‚€ã“ã¨ãŒã§ãã¾ã™ 8月2日（米国時間）ã®Apache Tomcat開発者メーリングリスト上ã®è°è«–ã«ã‚ˆã‚‹ã¨ã€Tomcat Connectors (mod_jk)ã«ã‚»ã‚ュリティー上ã®å•é¡ŒãŒã‚ã‚Šã€ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³1.2.24ãŒå–り消ã•ã‚Œã‚‹ã¨ã„ã†ç•°ä¾‹ã®äº‹æ…‹ã¨ãªã£ãŸã€‚ å–り消ã—ã®ç†ç”±ã¨ã—ã¦ã¯ã€ã€Œ401 HTTP_UNAUTHORIZEDã€ã®å‡¦ç†ã«å•é¡ŒãŒã‚ã‚‹ã¨ã„ã†ã‚‚ã®ã€‚ ä¿®æ£ã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³1.2.25ãŒæ¥é€±ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã‚‹äºˆå®šã¨ã®ã“ã¨ã§ã‚る。
mod_rewrite＋mod_jkã§å¤‰æ›å‰ã®URLãŒTomcatã«æ¸¡ã£ã¦ã—ã¾ã† - Do You PHP ã¯ã¦ãƒ–ãƒ
via. mod_jk 1.2.23 ã‹ã‚‰ã¯ ForwardURICompat オプションãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ãªããªã£ãŸ - 夜㮠Discovery mod_jk＋mod_rewrite＋Tomcatを使ã£ãŸã‚ã‚ŠãŒã¡ãªURL変æ›ãƒã‚¿ã§ã™ãŒã€ã‚·ã‚¹ãƒ†ãƒ 移行ä¸ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã§æ€ã„ã£ãã‚Šãƒãƒžã£ã¦ã¾ã—ãŸã€‚ mod_jk1.2.23ã®changelogã« Change the default value of JkOptions to ForwardURICompatUnparsed. The old default value was ForwardURICompat. This should make URL interpretation between Apache httpd and Tomcat consistent (prevent double decoding problems). (r
mod_jk1.2.19/1.2.20ã«è„†å¼±æ€§ - Do You PHP ã¯ã¦ãƒ–ãƒ
Apache Tomcat JK Connector – yohgaki's blogã‹ã‚‰ã€‚ã†ãゃ〜ï¼å…¥ã‚Œç›´ã—ã§ã™ã‹ã€‚。。orz The Apache Tomcat team is proud to announce the immediate availability of Tomcat Connectors 1.2.21. This is a stable release adding new features and a few bug fixes to version 1.2.20. It fixes a Critical vulnerability introduced in version 1.2.19 Please see the ChangeLog for a full list of changes. ChangeLogã¯æ¬¡ã®ã‚ˆã†ãªæ„Ÿã˜ã€‚4095ãƒã‚¤ãƒˆä»¥ä¸Šã®URLã®å ´åˆã€
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
CERT/CC Vulnerability Note VU#771937
Apache News Online: 10 August 2007 - Apache Tomcat JK 1.2.25 Web Server Connector released
{{#tags}}- {{label}}
{{/tags}}