[ol7_software_collections] httpd24-mod_ssl-1:2.4.34-15.0.1.el7.x86_64

Name:	httpd24-mod_ssl
Epoch:	1
Version:	2.4.34
Release:	15.0.1.el7
Architecture:	x86_64
Group:	System Environment/Daemons
Size:	241516
License:	ASL 2.0
RPM:	httpd24-mod_ssl-2.4.34-15.0.1.el7.x86_64.rpm
Source RPM:	httpd24-httpd-2.4.34-15.0.1.el7.src.rpm
Build Date:	Wed Mar 11 2020
Build Host:	x86-ol7-builder-03.us.oracle.com
Vendor:	Oracle America
URL:	http://httpd.apache.org/
Summary:	SSL/TLS module for the Apache HTTP Server
Description:	The mod_ssl module provides strong cryptography for the Apache Web server via the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols.

Changelog (Show File list) (Show related packages)

Wed Mar 11 2020 Tianyue Lan <tianyue.lan@oracle.com> - 2.4.34-15.0.1

- replace index.html with Oracle's index page oracle_index.html
- update vstring in specfile

Wed Nov 13 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-15

- Related: #1725922 - duplicated cookie in Apache httpd with mod_session

Tue Oct 08 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14

- Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
  dereference in mod_remoteip
- Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
  scripting in mod_proxy error page

Tue Oct 08 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-13
```
- Resolves: #1744120 - Unexpected OCSP in proxy SSL connection
```

Fri Oct 04 2019 Joe Orton <jorton@redhat.com> - 2.4.34-12

- Resolves: #1725922 - duplicated cookie in Apache httpd with mod_session

Tue Sep 24 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-11

- Resolves: #1678567 (CVE-2018-17189) - CVE-2018-17189 httpd: mod_http2:
  DoS via slow, unneeded request bodies

Wed Aug 28 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-10

- Resolves: #1745695 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of
  data request leads to denial of service
- Resolves: #1745680 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers
  leads to denial of service
- Resolves: #1745683 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
  response leads to denial of service

Wed Aug 07 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-9

- Resolves: #1696140 - CVE-2019-0217 httpd24-httpd: httpd: mod_auth_digest:
  access control bypass due to race condition
- Resolves: #1696095 - CVE-2019-0220 httpd24-httpd: httpd: URL normalization
  inconsistency
- Resolves: #1677498 - CVE-2018-17199 httpd24-httpd: httpd: mod_session_cookie
  does not respect expiry time
- Resolves: #1707636 - fix a regression introduced in r1740928
- Resolves: #1669213 - `ExtendedStatus Off` directive when using mod_systemd
  causes systemctl to hang
- Resolves: #1673019 - httpd can not be started with mod_md enabled

Wed Apr 03 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8

- Resolves: #1695429 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
  from modules scripts

Tue Nov 06 2018 Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7

- Resolves: #1646937 - Unable to start httpd
- Resolves: #1638711 - comments should be allowed at the end of Allow from
  statements