Merge ~octagalland/ubuntu-cve-tracker:retire_cve_2023_41081 into ubuntu-cve-tracker:master

[Octavio Galland]

retire CVE-2023-41081

retire CVE-2023-41081

[Emilia Torino (emitorino)]

LGTM, thanks!

review: Approve

diff --git a/meta_lists/package_info_overrides.json b/meta_lists/package_info_overrides.json
index b1c5230..fdc7e1f 100644
--- a/meta_lists/package_info_overrides.json
+++ b/meta_lists/package_info_overrides.json
@@ -867,6 +867,10 @@
         "description": "Lib3MF is a C++ implementation of the 3D Manufacturing Format",
         "title": "lib3mf"
     },
+    "libapache-mod-jk": {
+        "description": "Apache 2 connector for the Tomcat Java servlet engine",
+        "title": "mod_jk"
+    },
     "libapache-session-ldap-perl": {
         "description": "Apache::Session::LDAP Perl module - Store Apache Session in LDAP",
         "title": "Apache::Session::LDAP"
diff --git a/active/CVE-2023-41081 b/retired/CVE-2023-41081
similarity index 72%
rename from active/CVE-2023-41081
rename to retired/CVE-2023-41081
index 6168d28..7c89095 100644
--- a/active/CVE-2023-41081
+++ b/retired/CVE-2023-41081
@@ -1,3 +1,4 @@
+PublicDateAtUSN: 2023-09-13 10:15:00 UTC
 Candidate: CVE-2023-41081
 PublicDate: 2023-09-13 10:15:00 UTC
 References:
@@ -5,6 +6,7 @@ References:
  http://www.openwall.com/lists/oss-security/2023/09/13/2
  https://tomcat.apache.org/security-jk.html#Fixed_in_Apache_Tomcat_JK_Connector_1.2.49
  https://www.cve.org/CVERecord?id=CVE-2023-41081
+ https://ubuntu.com/security/notices/USN-6826-1
 Description:
  Important: Authentication Bypass CVE-2023-41081 The mod_jk component of
  Apache Tomcat Connectors in some circumstances, such as when a
@@ -25,25 +27,25 @@ Notes:
 Mitigation:
 Bugs:
 Priority: medium
-Discovered-by:
-Assigned-to: octagalland
+Discovered-by: Karl von Randow
+Assigned-to:
 CVSS:
  nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N [7.5 HIGH]
 
 Patches_libapache-mod-jk:
  upstream: https://github.com/apache/tomcat-connectors/commit/0095b6cb84f41313ee4c0364b49c766168790792
-upstream_libapache-mod-jk: needs-triage
+upstream_libapache-mod-jk: released (1.2.49)
 trusty_libapache-mod-jk: ignored (end of standard support)
 xenial_libapache-mod-jk: ignored (end of standard support)
-esm-apps/xenial_libapache-mod-jk: needed
+esm-apps/xenial_libapache-mod-jk: released (1:1.2.41-1ubuntu0.1~esm1)
 bionic_libapache-mod-jk: ignored (end of standard support)
-esm-apps/bionic_libapache-mod-jk: needed
-focal_libapache-mod-jk: needed
-esm-apps/focal_libapache-mod-jk: needed
-jammy_libapache-mod-jk: needed
-esm-apps/jammy_libapache-mod-jk: needed
+esm-apps/bionic_libapache-mod-jk: released (1:1.2.43-1ubuntu0.1~esm1)
+focal_libapache-mod-jk: released (1:1.2.46-1ubuntu0.1)
+esm-apps/focal_libapache-mod-jk: not-affected (1:1.2.46-1ubuntu0.1)
+jammy_libapache-mod-jk: released (1:1.2.48-1ubuntu0.1)
+esm-apps/jammy_libapache-mod-jk: not-affected (1:1.2.48-1ubuntu0.1)
 lunar_libapache-mod-jk: ignored (end of life, was needed)
-mantic_libapache-mod-jk: needed
-noble_libapache-mod-jk: needed
-esm-apps/noble_libapache-mod-jk: needed
-devel_libapache-mod-jk: needed
+mantic_libapache-mod-jk: released (1:1.2.48-2ubuntu0.1)
+noble_libapache-mod-jk: not-affected (1:1.2.49-1)
+esm-apps/noble_libapache-mod-jk: not-affected (1:1.2.49-1)
+devel_libapache-mod-jk: not-affected (1:1.2.49-1build1)