# ELSA-2024-2387: Security update for 2 packages

ELSA-2024-2387, released May 2, 2024, fixes 2 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2024-2387
- Platform: Linux
- Released: May 2, 2024
- Priority: High (Closes CVE-2023-41081, high severity)
- CVEs: 2, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2024-2387.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [mod_jk](https://patchblox.com/security/data/product/linux/mod-jk.md) | ol 9 | 0:1.2.49-1.el9_4 |
| [mod_proxy_cluster](https://patchblox.com/security/data/product/linux/mod-proxy-cluster.md) | ol 9 | 0:1.3.20-1.el9_4 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2023-41081](https://patchblox.com/security/data/cve/CVE-2023-41081.md) | High | apache2-mod_jk: This update for apache2-mod_jk fixes the following issues:  - Update to version 1.2.50: - CVE-2024-46544: Fixed incor... | 7.5 | 0.0159 |  |
| [CVE-2023-6710](https://patchblox.com/security/data/cve/CVE-2023-6710.md) | Routine | mod_jk: The mod_jk module is a plugin for the Apache HTTP Server to connect it with the Apache Tomcat servlet engine.  The mo... | 5.4 | 0.0224 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo