mod_proxy_html-1:2.4.37-54.module_el8.8.0+1256+e1598b50 >
A c]U] 47 |WUYM~>t SZ )2 [~=g
E[ue{ 3a8 +{3UE<+G~fcDnnK`<:z. e u$:9T(wwЏeyh]NiM2w*8EEy&K
T9gs A:4 |o$S5],dN"(eT23%`O DfXa<L22 p / (σI$ G OL㾡 YMy,R')o:Y8+3YĐKKng~rbĒK}%fm g\qb RSl08JDqFki 2ya5c8a173c2f7ecc05e3aa9b164c9693d8bd8d1b2 1f2ca5b30f51e2b65d13ee8934a837b13326d0381d1ab4d5a045cede2b27c0a0 K c]U]H7!X Y' V\sңAXeiDPmYabV*wdnr~p03 )FzֈbNTgI?J9<~AP>\P`6Gl[ "ЌzP5^n|,H^Ԣlʓ-tm4Aq 8=Lŋ|)]WeSξH3UJg UQ1;TV%ߢwlZƑ)=q
o?<|uDpfxeca}&.ŕ_ü~k3ԩ"Xg k+z-6"Q$ t6HJ= .Mo< .v[,"ŪjE(~ɱ+|mT+Gn;Ey\ R~p <&7Hr ׆dqt0'~Psf͑
~SIӏbk7BM CfL7 tMBeYoDd ?"YLaWo n@}{xc:>:KRꉸ " > p A S ? C d 8 < t @ [ u {
6 T ( ( Z 8 d 9
( : 4V B G H I X Y Z x [ | \ ] ^ + b d e f l t u v w T x l y C mod_proxy_html 2.4.37 54.module_el8.8.0+1256+e1598b50 HTML and XML content filters for the Apache HTTP Server The mod_proxy_html and mod_xml2enc modules provide filters which can
transform and modify HTML and XML content. cُHaarch64-04.mbox.centos.org gCentOS CentOS ASL 2.0 CentOS Buildsys System Environment/Daemons https://httpd.apache.org/ linux aarch64 5 2 8 A cَ;cُCcُAcُAcُ?cُ?a2211995b7e55b781f68666664f0bcd84550ed9a16edee07121f63477dfaaffa 26ea76387ab239f0527fb2dc564950bab023307e7d6c05dac344e7a8789de773 c7b5aa83a0fb8b2408049119e093fca64f7029a0e019edac587246a5dd9b2c02 ../../../../usr/lib64/httpd/modules/mod_proxy_html.so ../../../../usr/lib64/httpd/modules/mod_xml2enc.so root root root root root root root root root root root root httpd-2.4.37-54.module_el8.8.0+1256+e1598b50.src.rpm config(mod_proxy_html) mod_proxy_html mod_proxy_html(aarch-64) @ @ @ @ @ @ @ @ @
@ config(mod_proxy_html) httpd httpd-mmn ld-linux-aarch64.so.1()(64bit) ld-linux-aarch64.so.1(GLIBC_2.17)(64bit) libc.so.6()(64bit) libc.so.6(GLIBC_2.17)(64bit) libpthread.so.0()(64bit) libxml2.so.2()(64bit) libxml2.so.2(LIBXML2_2.4.30)(64bit) libxml2.so.2(LIBXML2_2.5.2)(64bit) libxml2.so.2(LIBXML2_2.6.0)(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) rtld(GNU_HASH) 1:2.4.37-54.module_el8.8.0+1256+e1598b50 0:2.4.37-54.module_el8.8.0+1256+e1598b50 20120211aarch64 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 cck@c(Ybޅbb2@b8haNa aaawaU`:@`f@`@`@_м@__@_:_^b^(@^@^]]@]߶]҇]@]g@]-@]] @\7\Z@\Yz\T4\\U@[@[[[@[H[u[[[ā@[ā@[ā@[@[@["@[YZ@Z@Z@Yp@Y{Y@Y@YéYéYéYéYX@YY YYx@Ym@YlYf@Ycl@YV=@YGY5GY @YXۡXP@X
@X@XwoX[@X[@XEVX)@X@WW~D@W~D@W~D@WKW@VVVVn@VhV.V CV @UK@U@Ua@UF@UQUQTp@T=@T@T
@TT_T k@T k@S0S@SGS@SS/S S@SSS"@SS5d@S4S&Sz@Sz@S(S@R@RRG@R@R@RsRrF@Ri Re@RVQ@Q Qޞ@QQo@Q@QQV@Q@Qo@Qm=@QQQ,Q,Q']Q P
@P6@P6@P{@PPl(PiPiPiPiPYPQPIP3x@P3x@P PO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5O KO@O NNS@N{#@NoENdNBrN)f@N&@N @N
MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@L LMxL7@K@Luboš Uhliarik - 2.4.37-54 Luboš Uhliarik - 2.4.37-53 Tomas Korbar - 2.4.37-52 Luboš Uhliarik - 2.4.37-51 Luboš Uhliarik - 2.4.37-50 Luboš Uhliarik - 2.4.37-49 Luboš Uhliarik - 2.4.37-48 Luboš Uhliarik - 2.4.37-47 Luboš Uhliarik - 2.4.37-46 Luboš Uhliarik - 2.4.37-45 Luboš Uhliarik - 2.4.37-44 Luboš Uhliarik - 2.4.37-43 Luboš Uhliarik - 2.4.37-42 Luboš Uhliarik - 2.4.37-41 Lubos Uhliarik - 2.4.37-40 Artem Egorenkov - 2.4.37-39 Lubos Uhliarik - 2.4.37-38 Lubos Uhliarik - 2.4.37-37 Lubos Uhliarik - 2.4.37-36 Lubos Uhliarik - 2.4.37-35 Lubos Uhliarik - 2.4.37-33 Lubos Uhliarik - 2.4.37-31 Joe Orton - 2.4.37-30 Lubos Uhliarik - 2.4.37-29 Lubos Uhliarik - 2.4.37-28 Lubos Uhliarik - 2.4.37-27 Lubos Uhliarik - 2.4.37-21 Lubos Uhliarik - 2.4.37-20 Joe Orton - 2.4.37-19 Lubos Uhliarik - 2.4.37-18 Lubos Uhliarik - 2.4.37-17 Lubos Uhliarik - 2.4.37-16 Lubos Uhliarik - 2.4.37-15 Lubos Uhliarik - 2.4.37-14 Lubos Uhliarik - 2.4.37-13 Lubos Uhliarik - 2.4.37-11 Lubos Uhliarik - 2.4.37-10 Lubos Uhliarik - 2.4.37-9 Joe Orton - 2.4.37-8 Joe Orton - 2.4.37-7 Joe Orton - 2.4.37-6 Luboš Uhliarik - 2.4.37-5 Luboš Uhliarik - 2.4.37-4 Luboš Uhliarik - 2.4.37-3 Joe Orton - 2.4.37-2 Lubos Uhliarik - 2.4.37-1 Luboš Uhliarik - 2.4.35-10 Lubos Uhliarik - 2.4.35-9 Joe Orton - 2.4.35-7 Joe Orton - 2.4.35-5 Lubos Uhliarik - 2.4.35-4 Lubos Uhliarik - 2.4.35-3 Lubos Uhliarik - 2.4.35-2 Lubos Uhliarik - 2.4.35-1 Lubos Uhliarik - 2.4.33-4 Joe Orton - 2.4.33-3 Luboš Uhliarik - 2.4.33-2 Joe Orton - 2.4.28-8 Luboš Uhliarik - 2.4.28-2 Luboš Uhliarik - 2.4.28-1 Joe Orton - 2.4.27-14 Joe Orton - 2.4.27-13 Joe Orton - 2.4.27-12 Stephen Gallagher - 2.4.27-11 Jeroen van Meeuwen - 2.4.27-10 Joe Orton - 2.4.27-9 Jeroen van Meeuwen - 2.4.27-8 Stephen Gallagher - 2.4.27-8.1 Joe Orton - 2.4.27-8.1 Joe Orton - 2.4.27-7 Fedora Release Engineering - 2.4.27-6 Fedora Release Engineering - 2.4.27-5 Joe Orton - 2.4.27-4 Joe Orton - 2.4.27-3 Luboš Uhliarik - 2.4.27-2 Luboš Uhliarik - 2.4.27-1 Joe Orton - 2.4.26-2 Luboš Uhliarik - 2.4.26-1 Joe Orton - 2.4.25-10 Joe Orton - 2.4.25-9 Joe Orton - 2.4.25-8 Luboš Uhliarik - 2.4.25-7 Luboš Uhliarik - 2.4.25-6 Joe Orton - 2.4.25-5 Fedora Release Engineering - 2.4.25-4 Joe Orton - 2.4.25-3 Luboš Uhliarik - 2.4.25-2 Luboš Uhliarik - 2.4.25-1 Luboš Uhliarik - 2.4.23-7 Joe Orton - 2.4.23-6 Joe Orton - 2.4.23-5 Joe Orton - 2.4.23-4 Joe Orton - 2.4.23-3 Joe Orton - 2.4.23-2 Joe Orton - 2.4.23-1 Joe Orton - 2.4.18-6 Joe Orton - 2.4.18-5 Joe Orton - 2.4.18-4 Joe Orton - 2.4.18-3 Fedora Release Engineering - 2.4.18-2 Jan Kaluza - 2.4.18-1 Joe Orton - 2.4.17-4 Jan Kaluza - 2.4.17-3 Jan Kaluza - 2.4.17-2 Joe Orton - 2.4.17-1 Jan Kaluza - 2.4.12-4 Joe Orton - 2.4.12-3 Fedora Release Engineering - 2.4.12-2 Jan Kaluza - 2.4.12-1 Jan Kaluza - 2.4.10-17 Jan Kaluza - 2.4.10-16 Jan Kaluza - 2.4.10-15 Joe Orton - 2.4.10-14 Jan Kaluza - 2.4.10-13 Jan Kaluza - 2.4.10-12 Jan Kaluza - 2.4.10-11 Jan Kaluza - 2.4.10-10 Joe Orton - 2.4.10-9 Joe Orton - 2.4.10-8 Jan Kaluza - 2.4.10-7 Joe Orton - 2.4.10-6 Fedora Release Engineering - 2.4.10-5 Jan Kaluza - 2.4.10-4 Jan Kaluza - 2.4.10-3 Joe Orton - 2.4.10-2 Joe Orton - 2.4.10-1 Jan Kaluza - 2.4.9-8 Jan Kaluza - 2.4.9-7 Jan Kaluza - 2.4.9-6 Joe Orton - 2.4.9-5 Fedora Release Engineering - 2.4.9-4 Jan Kaluza - 2.4.9-3 Jan Kaluza - 2.4.9-2 Jan Kaluza - 2.4.9-1 Joe Orton - 2.4.7-6 Stephen Gallagher 2.4.7-5 Jan Kaluza - 2.4.7-4 Jan Kaluza - 2.4.7-3 Joe Orton - 2.4.7-2 Joe Orton - 2.4.7-1 Joe Orton - 2.4.6-10 Joe Orton - 2.4.6-9 Joe Orton - 2.4.6-8 Jan Kaluza - 2.4.6-7 Joe Orton - 2.4.6-6 Jan kaluza - 2.4.6-5 Joe Orton - 2.4.6-4 Jan Kaluza - 2.4.6-3 Jan Kaluza - 2.4.6-2 Joe Orton - 2.4.6-1 Jan Kaluza - 2.4.4-12 Joe Orton - 2.4.4-11 Joe Orton - 2.4.4-10 Joe Orton - 2.4.4-9 Jan Kaluza - 2.4.4-8 Jan Kaluza - 2.4.4-7 Jan Kaluza - 2.4.4-6 Jan Kaluza - 2.4.4-5 Jan Kaluza - 2.4.4-4 Jan Kaluza - 2.4.4-3 Joe Orton - 2.4.4-2 Joe Orton - 2.4.4-1 Joe Orton - 2.4.3-17 Fedora Release Engineering - 2.4.3-16 Joe Orton - 2.4.3-15 Joe Orton - 2.4.3-14 Joe Orton - 2.4.3-13 Joe Orton - 2.4.3-12 Joe Orton - 2.4.3-11 Joe Orton - 2.4.3-10 Joe Orton - 2.4.3-9 Joe Orton - 2.4.3-8 Joe Orton - 2.4.3-7 Jan Kaluza - 2.4.3-6 Joe Orton - 2.4.3-5 Joe Orton - 2.4.3-4 Jan Kaluza - 2.4.3-3 Joe Orton - 2.4.3-2 Joe Orton - 2.4.3-1 Joe Orton - 2.4.2-23 Fedora Release Engineering - 2.4.2-22 Joe Orton - 2.4.2-21 Joe Orton - 2.4.2-20 Joe Orton - 2.4.2-19 Joe Orton - 2.4.2-18 Joe Orton - 2.4.2-17 Joe Orton - 2.4.2-16 Joe Orton - 2.4.2-15 Joe Orton - 2.4.2-14 Joe Orton - 2.4.2-13 Joe Orton - 2.4.2-12 Joe Orton - 2.4.2-11 Joe Orton - 2.4.2-10 Joe Orton - 2.4.2-9 Joe Orton - 2.4.2-8 Joe Orton - 2.4.2-7 Joe Orton - 2.4.2-6 Joe Orton - 2.4.2-5 Joe Orton - 2.4.2-4 Joe Orton - 2.4.2-3 Joe Orton - 2.4.2-2 Jan Kaluza - 2.4.2-1 Joe Orton - 2.4.1-6 Joe Orton - 2.4.1-5 Joe Orton - 2.4.1-4 Joe Orton - 2.4.1-3 Joe Orton - 2.4.1-2 Joe Orton - 2.4.1-1 Joe Orton - 2.2.22-2 Joe Orton - 2.2.22-1 Petr Pisar - 2.2.21-8 Jan Kaluza - 2.2.21-7 Joe Orton - 2.2.21-6 Fedora Release Engineering - 2.2.21-5 Jan Kaluza - 2.2.21-4 Jan Kaluza - 2.2.21-3 Ville Skyttä - 2.2.21-2 Joe Orton - 2.2.21-1 Joe Orton - 2.2.20-1 Jan Kaluza - 2.2.19-5 Iain Arnell 1:2.2.19-4 Jan Kaluza - 2.2.19-3 Jan Kaluza - 2.2.19-2 Joe Orton - 2.2.19-1 Joe Orton - 2.2.17-13 Joe Orton - 2.2.17-12 Joe Orton - 2.2.17-11 Joe Orton - 2.2.17-10 Joe Orton - 2.2.17-9 Fedora Release Engineering - 2.2.17-8 Joe Orton - 2.2.17-7 Joe Orton - 2.2.17-6 Joe Orton - 2.2.17-5 Joe Orton - 2.2.17-4 Joe Orton - 2.2.17-3 Joe Orton - 2.2.17-2 Joe Orton - 2.2.17-1 Joe Orton - 2.2.16-2 Joe Orton - 2.2.16-1 Joe Orton - 2.2.15-3 Robert Scheck - 2.2.15-1 - Resolves: #2095650 - Dependency from mod_http2 on httpd broken - Resolves: #2050888 - httpd with SSL fails to start unless hostname command
was installed - Add the SNI support in mod_proxy_wstunnel module for Apache httpd
- Resolves: rhbz#2017543 - Resolves: #2097015 - CVE-2022-28614 httpd:2.4/httpd: out-of-bounds read via
ap_rwrite()
- Resolves: #2097031 - CVE-2022-28615 httpd:2.4/httpd: out-of-bounds read in
ap_strcmp_match()
- Resolves: #2097458 - CVE-2022-30522 httpd:2.4/httpd: mod_sed: DoS
vulnerability
- Resolves: #2097480 - CVE-2022-30556 httpd:2.4/httpd: mod_lua: Information
disclosure with websockets
- Resolves: #2098247 - CVE-2022-31813 httpd:2.4/httpd: mod_proxy:
X-Forwarded-For dropped by hop-by-hop mechanism
- Resolves: #2097451 - CVE-2022-29404 httpd:2.4/httpd: mod_lua: DoS in
r:parsebody
- Resolves: #2096997 - CVE-2022-26377 httpd:2.4/httpd: mod_proxy_ajp: Possible
request smuggling - Resolves: #2065237 - CVE-2022-22719 httpd:2.4/httpd: mod_lua: Use of
uninitialized value of in r:parsebody
- Resolves: #2065267 - CVE-2022-22721 httpd:2.4/httpd: core: Possible buffer
overflow with very large or unlimited LimitXMLRequestBody
- Resolves: #2065324 - CVE-2022-23943 httpd:2.4/httpd: mod_sed: Read/write
beyond bounds - Resolves: #2090848 - CVE-2020-13950 httpd:2.4/httpd: mod_proxy NULL pointer
dereference - Resolves: #2065249 - CVE-2022-22720 httpd:2.4/httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlier - Resolves: #2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference
or SSRF in forward proxy configurations - Resolves: #2035063 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
overflow when parsing multipart content - Resolves: #2007199 - CVE-2021-36160 httpd:2.4/httpd: mod_proxy_uwsgi:
out-of-bounds read via a crafted request uri-path
- Resolves: #1972491 - CVE-2021-33193 httpd:2.4/mod_http2: Request splitting via
HTTP/2 method injection and mod_proxy - Resolves: #1968278 - CVE-2020-35452 httpd:2.4/httpd: Single zero byte stack
overflow in mod_auth_digest
- Resolves: #2001046 - Apache httpd OOME with mod_dav in RHEL 8
- Resolves: #2005128 (CVE-2021-34798) - CVE-2021-34798 httpd: NULL pointer
dereference via malformed requests
- Resolves: #1984828 - mod_proxy_hcheck piles up health checks leading to high
memory consumption
- Resolves: #2005119 - CVE-2021-39275 httpd: out-of-bounds write in
ap_escape_quotes() via malicious input - Related: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
a crafted request uri-path - Resolves: #2007236 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
a crafted request uri-path
- Resolves: #1969229 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
mod_session - Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo - Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts - prevent htcacheclean from while break when first file processed - Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
to be able to handle certs without matching private key - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove() - Resolves: #1651376 - centralizing default index.html for httpd - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
renegotiation - Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
a balancer - Resolves: #1209162 - support logging to journald from CustomLog - Resolves: #1823263 (CVE-2020-1934) - CVE-2020-1934 httpd: mod_proxy_ftp use of
uninitialized value - Related: #1771847 - BalancerMember ping parameter for mod_proxy_http
doesn't work - Resolves: #1823259 - CVE-2020-1927 httpd:2.4/httpd: mod_rewrite configurations
vulnerable to open redirect
- Resolves: #1747284 - CVE-2019-10098 httpd:2.4/httpd: mod_rewrite potential
open redirect
- Resolves: #1747281 - CVE-2019-10092 httpd:2.4/httpd: limited cross-site
scripting in mod_proxy error page
- Resolves: #1747291 - CVE-2019-10097 httpd:2.4/httpd: null-pointer dereference
in mod_remoteip
- Resolves: #1771847 - BalancerMember ping parameter for mod_proxy_http
doesn't work
- Resolves: #1794728 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1775158 - POST request with TLS 1.3 PHA client auth fails:
Re-negotiation handshake failed: Client certificate missing - Resolves: #1704317 - Add support for SSLKEYLOGFILE - mod_cgid: enable fd passing (#1633224) - Resolves: #1744121 - Unexpected OCSP in proxy SSL connection
- Resolves: #1725031 - htpasswd: support SHA-x passwords for FIPS compatibility
- Resolves: #1633224 - mod_cgid logging issues - remove bundled mod_md module
- Related: #1747898 - add mod_md package - Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
of data request leads to denial of service
- Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
headers leads to denial of service
- Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
large response leads to denial of service - Resolves: #1730721 - absolute path used for default state and runtime dir by
default - Resolves: #1724549 - httpd response contains garbage in Content-Type header - Resolves: #1696142 - CVE-2019-0217 httpd:2.4/httpd: mod_auth_digest: access
control bypass due to race condition
- Resolves: #1696097 - CVE-2019-0220 httpd:2.4/httpd: URL normalization
inconsistency
- Resolves: #1669221 - `ExtendedStatus Off` directive when using mod_systemd
causes systemctl to hang
- Resolves: #1673022 - httpd can not be started with mod_md enabled - Resolves: #1695432 - CVE-2019-0211 httpd: privilege escalation
from modules scripts
- Resolves: #1696091 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control
bypass when using per-location client certification authentication - Resolves: #1672977 - state-dir corruption on reload - Resolves: #1670716 - Coredump when starting in FIPS mode - add security fix for CVE-2019-0190 (#1671282) - add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir - add httpd.conf(5) (#1611361) - Resolves: #1652966 - Missing RELEASE in http header - Resolves: #1641951 - No Documentation= line in htcacheclean.service files - Resolves: #1643713 - TLS connection allowed while all protocols are forbidden - mod_ssl: fix off-by-one causing crashes in CGI children (#1649428) - Resolves: #1644625 - httpd rebase to 2.4.37 - Related: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen - mod_ssl: allow sending multiple CA names which differ only in case - mod_ssl: drop SSLRandomSeed from default config (#1638730)
- mod_ssl: follow OpenSSL protocol defaults if SSLProtocol
is not configured (Rob Crittenden, #1638738) - mod_ssl: don't require SSLCryptoDevice to be set for PKCS#11 cert - Resolves: #1635681 - sync with Fedora 28/29 httpd
- comment-out SSLProtocol, SSLProxyProtocol from ssl.conf in default
configuration; now follow OpenSSL system default (#1468322)
- dropped NPN support
- mod_md: change hard-coded default MdStoreDir to state/md (#1563846)
- don't block on service try-restart in posttrans scriptlet
- build and load mod_brotli
- mod_systemd: show bound ports in status and log to journal
at startup
- updated httpd.service.xml man page
- tweak wording in privkey passphrase prompt
- drop sslmultiproxy patch
- apachectl: don't read /etc/sysconfig/httpd
- drop irrelevant Obsoletes for devel subpackage
- move instantiated httpd@.service to main httpd package - Resolves: #1602548 - various covscan fixes - apache httpd can work with TLS 1.3 (#1617997)
- drop SSLv3 support patch - new version 2.4.35 (#1632754) - mod_ssl: enable SSLv3 and change behavior of "SSLProtocol All"
configuration (#1622630) - mod_ssl: add PKCS#11 cert/key support (Anderson Sasaki, #1527084) - new version 2.4.33
- add mod_md subpackage; load mod_proxy_uwsgi by default - remove %ghosted /etc/sysconfig/httpd (#1572676) - Resolves: #1512563 - httpd: update welcome page branding
- Resolves: #1511123 - RFE: httpd use event MPM by default
- Resolves: #1493510 - RFE: httpd, add IP_FREEBIND support for Listen - new version 2.4.28 - add notes on enabling httpd_graceful_shutdown boolean for prefork - drop Requires(post) for mod_ssl - better error handling in httpd-ssl-gencerts (#1494556) - Require sscg 2.2.0 for creating service and CA certificates together - Address CVE-2017-9798 by applying patch from upstream (#1490344) - use sscg defaults; append CA cert to generated cert
- document httpd-init.service in httpd-init.service(8) - Address CVE-2017-9798 by applying patch from upstream (#1490344) - Generate SSL certificates on service start, not %posttrans - move httpd.service.d, httpd.socket.d dirs to -filesystem - add new content-length filter (upstream PR 61222) - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild - update mod_systemd (r1802251) - switch to event by default for Fedora 27 and later (#1471708) - Resolves: #1469959 - httpd update cleaned out /etc/sysconfig - new version 2.4.27 - mod_proxy_fcgi: fix further regressions (PR 61202) - new version 2.4.26 - move unit man pages to section 8, add as Documentation= in units - add httpd.service(5) and httpd.socket(5) man pages - require mod_http2, now packaged separately - Resolves: #1397243 - Backport Apache Bug 53098 - mod_proxy_ajp:
patch to set worker secret passed to tomcat - Resolves: #1434916 - httpd.service: Failed with result timeout - link only httpd, not support/* against -lselinux -lsystemd - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild - mod_watchdog: restrict thread lifetime (#1410883) - Resolves: #1358875 - require nghttp2 >= 1.5.0 - new version 2.4.25 - Resolves: #1401530 - CVE-2016-8740 httpd: Incomplete handling of
LimitRequestFields directive in mod_http2 - fix build with OpenSSL 1.1 (#1392900)
- fix typos in ssl.conf (josef randinger, #1379407) - no longer package /etc/sysconfig/httpd
- synch ssl.conf with upstream - add security fix for CVE-2016-5387 - load mod_watchdog by default (#1353582) - restore build of mod_proxy_fdpass (#1325883)
- improve check tests to catch configured-but-not-built modules - update to 2.4.23 (#1325883, #1353203)
- load mod_proxy_hcheck
- recommend use of "systemctl edit" in httpd.service - have "apachectl graceful" start httpd if not running, per man page - use redirects for lang-specific /manual/ URLs - fix welcome page HTML validity (Ville Skyttä) - remove httpd pre script (duplicate of httpd-filesystem's)
- in httpd-filesystem pre script, create group/user iff non-existent - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild - update to new version 2.4.18 - re-enable mod_asis due to popular demand (#1284315) - fix crash when using -X argument (#1272234) - rebase socket activation patch to 2.4.17 - update to 2.4.17 (#1271224)
- build, load mod_http2
- don't build mod_asis, mod_file_cache
- load mod_cache_socache, mod_proxy_wstunnel by default
- check every built mod_* is configured
- synch ssl.conf with upstream; disable SSLv3 by default - update to 2.4.16 - mod_ssl: use "localhost" in the dummy SSL cert if len(FQDN) > 59 chars - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild - update to 2.4.12 - fix compilation with lua-5.3 - remove filter for auto-provides of httpd modules, it is not needed since F20 - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704)
- mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)
- mod_proxy_fcgi: fix a potential crash with long headers (CVE-2014-3583)
- mod_lua: fix handling of the Require line when a LuaAuthzProvider is used
in multiple Require directives with different arguments (CVE-2014-8109) - require apr-util 1.5.x - use NoDelay and DeferAcceptSec in httpd.socket - increase suexec minimum acceptable uid/gid to 1000 (#1136391) - fix hostname requirement and conflict with openssl-libs - use KillMode=mixed in httpd.service (#1135122) - set vstring based on /etc/os-release (Pat Riehecky, #1114539) - pull in httpd-filesystem as Requires(pre) (#1128328)
- fix cipher selection in default ssl.conf, depend on new OpenSSL (#1134348)
- require hostname for mod_ssl post script (#1135118) - mod_systemd: updated to the latest version
- use -lsystemd instead of -lsystemd-daemon (#1125084)
- fix possible crash in SIGINT handling (#958934) - mod_ssl: treat "SSLCipherSuite PROFILE=..." as special (#1109119)
- switch default ssl.conf to use PROFILE=SYSTEM (#1109119) - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild - add /usr/bin/useradd dependency to -filesystem requires - fix creating apache user in pre script (#1128328) - enable mod_request by default for mod_auth_form
- move disabled-by-default modules from 00-base.conf to 00-optional.conf - update to 2.4.10
- expand variables in docdir example configs - add support for systemd socket activation (#1111648) - remove conf.modules.d from httpd-filesystem subpackage (#1081453) - add httpd-filesystem subpackage (#1081453) - mod_ssl: don't use the default OpenSSL cipher suite in ssl.conf (#1109119) - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild - add support for SetHandler + proxy (#1078970) - move macros from /etc/rpm to macros.d (#1074277)
- remove unused patches - update to 2.4.9 - use 2048-bit RSA key with SHA-256 signature in dummy certificate - Create drop directory for systemd snippets - remove provides of old MMN, because it contained double-dash (#1068851) - fix graceful restart using legacy actions - conflict with pre-1.5.0 APR
- fix sslsninotreq patch - update to 2.4.7 (#1034071) - switch to requiring system-logos-httpd (#1031288) - change mmnisa to drop "-" altogether - drop ambiguous invalid "-" in RHS of httpd-mmn Provide, keeping old Provide
for transition - systemd: use {MAINPID} notation to ensure /bin/kill has always the second arg - mod_ssl: allow SSLEngine to override Listen-based default (r1537535) - systemd: send SIGWINCH signal without httpd -k in ExecStop - load mod_macro by default (#998452)
- add README to conf.modules.d
- mod_proxy_http: add possible fix for threading issues (r1534321)
- core: add fix for truncated output with CGI scripts (r1530793) - require fedora-logos-httpd (#1009162) - revert fix for dumping vhosts twice - update to 2.4.6
- mod_ssl: use revised NPN API (r1487772) - mod_unique_id: replace use of hostname + pid with PRNG output (#976666)
- apxs: mention -p option in manpage - add patch for aarch64 (Dennis Gilmore, #925558) - remove duplicate apxs man page from httpd-tools - remove zombie dbmmanage script - return 400 Bad Request on malformed Host header - ignore /etc/sysconfig/httpd and document systemd way of setting env variables
in this file - htpasswd/htdbm: fix hash generation bug (#956344)
- do not dump vhosts twice in httpd -S output (#928761)
- mod_cache: fix potential crash caused by uninitialized variable (#954109) - execute systemctl reload as result of apachectl graceful
- mod_ssl: ignore SNI hints unless required by config
- mod_cache: forward-port CacheMaxExpire "hard" option
- mod_ssl: fall back on another module's proxy hook if mod_ssl proxy
is not configured. - fix service file to not send SIGTERM after ExecStop (#906321, #912288) - protect MIMEMagicFile with IfModule (#893949) - really package mod_auth_form in mod_session (#915438) - update to 2.4.4
- fix duplicate ownership of mod_session config (#914901) - add mod_session subpackage, move mod_auth_form there (#894500) - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild - add systemd service for htcacheclean - drop patch for r1344712 - filter mod_*.so auto-provides (thanks to rcollet)
- pull in syslog logging fix from upstream (r1344712) - rebuild to pick up new apr-util-ldap - rebuild - pull upstream patch r1392850 in addition to r1387633 - define PLATFORM in os.h using vendor string - use systemd script unconditionally (#850149) - use systemd scriptlets if available (#850149)
- don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists - use systemctl from apachectl (#842736) - fix some error log spam with graceful-stop (r1387633)
- minor mod_systemd tweaks - use IncludeOptional for conf.d/*.conf inclusion - adding mod_systemd to integrate with systemd better - mod_ssl: add check for proxy keypair match (upstream r1374214) - update to 2.4.3 (#849883)
- own the docroot (#848121) - add mod_proxy fixes from upstream (r1366693, r1365604) - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild - drop explicit version requirement on initscripts - mod_ext_filter: fix error_log warnings - support "configtest" and "graceful" as initscripts "legacy actions" - avoid use of "core" GIF for a "core" directory (#168776)
- drop use of "syslog.target" in systemd unit file - use _unitdir for systemd unit file
- use /run in unit file, ssl.conf - mod_ssl: fix NPN patch merge - move tmpfiles.d fragment into /usr/lib per new guidelines
- package /run/httpd not /var/run/httpd
- set runtimedir to /run/httpd likewise - fix htdbm/htpasswd crash on crypt() failure (#818684) - pull fix for NPN patch from upstream (r1345599) - update suexec patch to use LOG_AUTHPRIV facility - really fix autoindex.conf (thanks to remi@) - fix autoindex.conf to allow symlink to poweredby.png - suexec: use upstream version of patch for capability bit support - suexec: use syslog rather than suexec.log, drop dac_override capability - mod_ssl: add TLS NPN support (r1332643, #809599) - add BR on APR >= 1.4.0 - use systemctl from logrotate (#221073) - pull from upstream:
* use TLS close_notify alert for dummy_connection (r1326980+)
* cleanup symbol exports (r1327036+) - really fix restart - tweak default ssl.conf
- fix restart handling (#814645)
- use graceful restart by default - update to 2.4.2 - fix macros - add _httpd_moddir to macros - fix symlink for poweredby.png
- fix manual.conf - add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc)
- move mod_ldap, mod_authnz_ldap to mod_ldap subpackage - clean docroot better
- ship proxy, ssl directories within /var/cache/httpd
- default config:
* unrestricted access to (only) /var/www
* remove (commented) Mutex, MaxRanges, ScriptSock
* split autoindex config to conf.d/autoindex.conf
- ship additional example configs in docdir - update to 2.4.1
- adopt upstream default httpd.conf (almost verbatim)
- split all LoadModules to conf.modules.d/*.conf
- include conf.d/*.conf at end of httpd.conf
- trim %changelog - fix build against PCRE 8.30 - update to 2.2.22 - Rebuild against PCRE 8.30 - fix #783629 - start httpd after named - complete conversion to systemd, drop init script (#770311)
- fix comments in /etc/sysconfig/httpd (#771024)
- enable PrivateTmp in service file (#781440)
- set LANG=C in /etc/sysconfig/httpd - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild - fix #751591 - start httpd after remote-fs - allow change state of BalancerMember in mod_proxy_balancer web interface - Make mmn available as %{_httpd_mmn}.
- Add .svgz to AddEncoding x-gzip example in httpd.conf. - update to 2.2.21 - update to 2.2.20
- fix MPM stub man page generation - fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd - rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided
directory names - fix #716621 - suexec now works without setuid bit - fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve - update to 2.2.19
- enable dbd, authn_dbd in default config - fix path expansion in service files - add systemd service files (#684175, thanks to Jóhann B. Guðmundsson) - minor updates to httpd.conf
- drop old patches - rebuild - use arch-specific mmn - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild - generate dummy mod_ssl cert with CA:FALSE constraint (#667841)
- add man page stubs for httpd.event, httpd.worker
- drop distcache support
- add STOP_TIMEOUT support to init script - update default SSLCipherSuite per upstream trunk - fix requires (#667397) - de-ghost /var/run/httpd - add tmpfiles.d configuration, ghost /var/run/httpd (#656600) - drop setuid bit, use capabilities for suexec binary - update to 2.2.17 - link everything using -z relro and -z now - update to 2.2.16 - default config tweaks:
* harden httpd.conf w.r.t. .htaccess restriction (#591293)
* load mod_substitute, mod_version by default
* drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf
* add commented list of shipped-but-unloaded modules
* bump up worker defaults a little
* drop KeepAliveTimeout to 5 secs per upstream
- fix LSB compliance in init script (#522074)
- bundle NOTICE in -tools
- use init script in logrotate postrotate to pick up PIDFILE
- drop some old Obsoletes/Conflicts - update to 2.2.15 (#572404, #579311) mod_proxy_html 1:2.4.37-54.module_el8.8.0+1256+e1598b50 1:2.4.37-54.module_el8.8.0+1256+e1598b50 1:2.4.37-54.module_el8.8.0+1256+e1598b50 1:2.4.1-2 00-proxyhtml.conf .build-id dbb363e145b2fc1c75186340562cefce8e153c fcbf981643c852b43a9fa189f4277d9ecca41f mod_proxy_html.so mod_xml2enc.so /etc/httpd/conf.modules.d/ /usr/lib/ /usr/lib/.build-id/02/ /usr/lib/.build-id/c1/ /usr/lib64/httpd/modules/ -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection cpio xz 2 aarch64-redhat-linux-gnu ASCII text directory ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=02dbb363e145b2fc1c75186340562cefce8e153c, stripped ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=c1fcbf981643c852b43a9fa189f4277d9ecca41f, stripped
R R
R R R R R R R R R R R R R R R R utf-8 39ff147698aee82d1d40d96a2e13b0949ccdfe42f0b11234f07dcb98d17b2038 httpd:2.4:8080020230131213244:fd72936b ? 7zXZ
! #,"Q~]
b2u Q{LUw~θ0 C;$sOχua^؍<^@4| Pl۾V& ecol%1
yBoa /5I)|)yOnMrVc[yj_k4syw3I]W@ ydyI3p"UVbզgx0!1n ٠ AC㲯}y!m*8h\&^{
s+"l~W9\wGFvWds[^2iEUtpV`SS߇JbL#5{62[u
җk<q./
5#t*jl-6`ys rk'L[ ^gԼ/,&(a m+쇶$Ub"][qA8"zj7J_}QPx^i2Xf僁Rt.Ds{Mh`" K7p\rb#D'Uظ~xJ?lA{q6}S-PWwGH<)Tl5V{n?ۛ >izJ MZoد u+7#wSB@M؇D&ӊ ;+ Jۮ{AVS& :m~!-55OX A a^P&D.)iH?Fwscr{_
-5 U\Ulel3AR{=ʙQ9n&ݖb`R^WmB#AH#6A@wEh}]w?҂ESHW)>C:ztz^x^.]VM@R5;,z ^G6f \ʡM
އ*_\y̓-pC@IzJ9eΛ2NWLPt_]`u g{APQW1paslr4H˺ix #;A3 Knw+d6J8!ĸ7& # )w)&Q;d[^EL)CZj`s8IYqƵ P EOc<$ء*~ىw|L&ud{e 1݉> fC(,GYxG^VmzϾ =V4$^ID̰LT2peRiZnp%;3{mD1=0'Nj
PSMzD\DtcϽ?5u WOi/4',hnn '9YVnɸC3{=YE 8ruzTF4G0N2ğ < _^&=.n^_
#PS;cl|xUOd=Zρ$tB Ov7^m>.k@J
3fC.)$! uX):;(8ݖB-݈XDoV&9Rn}]"]Y$vyn%PD
k{_2=\WN^XE9`VbmJڸʈS2tL'`Cb<'?v4mB\;x#^ P`jKl*"\'EtyکCBqL!-^Av'?
y 2ʕS2n^ܝ
( ϓ{52UaU6 9<6X84vl*45S}?R'd +g0VyrB[TbDg1Wr
#ΐ֪36:5ňa 84:+R;j2{lwVdt\Di_d̵I-=YŎ;cB%o},6P,s'h&l9~c6',Qx"PsMBq ;j$## ?3E.O7>a/ ۤyuV;=bη5ʥ)1
c`y)y#`Mtk ,`[1{P(}3Dx]:wG<1EW(LK"R(Yvv>QԸ&>y Yr. }qVS!M:5()fiHSXL"T>Cf"@0 ku6h꿢Fw(ׂ3D]چd5CK(_462UG.l@I]/**Pʵҵ@Cn_n
E{Q 4KϷzˈ:z uķ,,Trn.A% ,xYD. %mλ4{ RE?
块K!ku{z|\az9pB콍\5عGR71n8Yfe ?
Z~ex, Bo]C/ʼ^0pEdD\Aw4eO >-a< ~K.dBd^bxkiد ʧ6*Τ5 IU, =x+ZU\X"l'Ȃ9?9q5f{RI 5O78| e˺ɺ=u\0ӨVaH'A2b
' E9mk¹hQo/2 &;WZwpx̬g8P {u7#k`.čѹȐ Rtx =tNH'bZ)TGaTΕ W;J63'%AXyNPץbvIi' DkmƟdVYۄW T|B =$brTRDtNƝ"|*"f Bv "cCZ
>s9- #gCiߜIM'6# }M4&"'~yzߧ+-w4GS8]l?D 6XovޞXCmT y^E
>\A/BaEn&~mg#qjؠHx H
xo} Zd L1E_+k@4r#ኚ-8KT´H#-U+gkA+Nk6~d#;zRfE_GlN3riEF~ ?+PfDce4C|m$$L
#xbjz[< 5! \U5ޣ" 1R$8 vM
>:S赐\/Du2wv9qSh
ŲxaDsE>Gaa k/~9 MO ϖv"I"=?sPq8Hm`Q!h ouwU}A*^`_\9/GYɭiNZ IB3j -!^DBIS
( j#Bvrb W0cTj @6X?Tq(Wްu(QDkN4\7;spi ]S`DU:`7358W!;R>Q_+'P:L 1]q=͕lx =4)S(~p[vvt-}1Dp2Eǩd ^B&)sօG]h :`&9 j/NJqmoIIENdʕ.
> "AkϘ1ml-n˝s9)?wAsm8r+\ɀ;kd(B='Ö"Mc4~D0|N=$?I1 ss;ɘ#}FNYPS
eJGhO 'D )ǤV
$oO[ 91 ![lv^dNSąr_mt0+%"ɡ;'ÛCb U;Rq!e<^R
kd)\TvRhIaG+ci-vqO.睺}N7*mVE"r#s#7He@R
GF03 >7QDMg پ\|c[3ر?K]Kkd'\Ts \&k߰eFl[W 6 b ߿t&$/COS0llDNzg
|s+K6%u%݈ S7צg2{]*hOSiv)- E[?`6bEUɩ In5!ݐOmX 7?{}BL^gJ<(uD7ȉoxSr^2B(-K
ez2x.{}h+|f%`n<62
tgՅ\T͑{p\>Ϸ+.+lKˊ3(m@ rl[7V_$@15.CP^ku|dݭ"9>\\50=]FL&t.,8(z| §{굧$L'X/ fkdE]V,{l
# -_אU FX+?#wqmuEG-_ksM{78J%r_UkOK]W-'%rәvh[oi"Ր2 3]/fX33^ B[&
! /oyΓ"nCπ~=7WYǑVWb2٪sf
@<[!98dܳ>G#`[+Rj%iznN\xo EX D J)0B8QZ;ni4%CwRGrDz ]εNjBr(g¢u +cj?
a$v^`*uQ~4ɫAw%0"YCkyfAVy|wqH!
RyM G~s-\KSEjf] %%]6,05y@uE8#
Le [[W & j&d'm]]jRX̻£=P/ԯRaΛPss
l>Z~N u9vaw "N 1KT%U$`ϦI]8WsMX Fy f_\A#4_^.?_7@Jz"P jw
xg/}K_^'0 ViEהHd{`8. /y3ZUÔ=[L4wB&zDMk< +r: S[Mu5#"vF 8#Z#1YȤXh%mnvBm.@?a P ]rnx3t
}r& ż}oh":6g0d-VhUfjCa oB=W 6lYarK<#yl>҉ \Խp Y^}Kv'H'@q5-%n|H 8JDX3,`&Ƭy*V3d[ WҔl9)N zqٕc_ʞiP#TaKw#MZޑCaӯY
& *`|(`?aoٴ} KDJ P"zn4`D[ ;O`VMce1ػBDP7n
{!)CN+'e ?J#~ #6T:1`m{Hk`)#]}P$+*݄!lOP&+-dE~6H' T8 ZLjt
BW"|oE /hۺ|C:%`XA2Wsr'$Ǻk}30JVr#I>V_թMO7 9=j_ n?:Khr,K˩Vh
a.J <1{e>J