[ol8_appstream] mod_ssl-1:2.4.37-39.0.1.module+el8.4.0+20372+b87b2deb.1.x86_64

The mod_ssl module provides strong cryptography for the Apache Web
server via the Secure Sockets Layer (SSL) and Transport Layer
Security (TLS) protocols.

Changelog (Show File list) (Show related packages)

• Tue Oct 12 2021 EL Errata <el-errata_ww@oracle.com> - 2.4.37-39.1.0.1.1

  - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
  - Replace index.html with Oracle's index page oracle_index.html

• Thu Sep 30 2021 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-39.1

  - Resolves: #2007234 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
    a crafted request uri-path
  - Resolves: #2007646 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
    mod_session

• Tue Jan 26 2021 Artem Egorenkov <aegorenk@redhat.com> - 2.4.37-39

  - prevent htcacheclean from while break when first file processed

• Tue Jan 26 2021 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-38

  - Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache

• Wed Dec 09 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37

  - Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
    to be able to handle certs without matching private key

• Mon Nov 30 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36

  - Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
    mod_proxy_wstunnel
  - Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()

• Wed Nov 11 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-35

  - Resolves: #1651376 - centralizing default index.html for httpd

• Fri Nov 06 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33

  - Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
    concurrency issues
  - Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
    a client cert to backend server
  - Resolves: #1680118 - unorderly connection close when client attempts
    renegotiation

• Thu Oct 29 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-31

  - Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
    not respect expiry time
  - Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
    overflow
  - Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
  - Resolves: #1869576 - httpd : mod_proxy should allow to specify
    Proxy-Authorization in ProxyRemote directive
  - Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
  - Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
    a balancer

• Mon Jun 15 2020 Joe Orton <jorton@redhat.com> - 2.4.37-30

  - Resolves: #1209162 - support logging to journald from CustomLog