[ol8_appstream] mod_session-2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1.x86_64

Name:	mod_session
Version:	2.4.37
Release:	39.0.2.module+el8.4.0+20402+038b8ccd.1
Architecture:	x86_64
Module:	httpd:2.4:8040020211008164252:522a0ee4
Group:	System Environment/Daemons
Size:	114383
License:	ASL 2.0
RPM:	mod_session-2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1.x86_64.rpm
Source RPM:	httpd-2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1.src.rpm
Build Date:	Tue Nov 09 2021
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://httpd.apache.org/
Summary:	Session interface for the Apache HTTP Server
Description:	The mod_session module and associated backends provide an abstract interface for storing and accessing per-user session data.

Changelog (Show File list) (Show related packages)

Tue Nov 02 2021 Kaylin Devchand <kaylin.devchand@oracle.com> - 2.4.37-39.0.2.1
```
- mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690]
```

Tue Oct 12 2021 EL Errata <el-errata_ww@oracle.com> - 2.4.37-39.1.0.1.1

- Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
- Replace index.html with Oracle's index page oracle_index.html

Thu Sep 30 2021 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-39.1

- Resolves: #2007234 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2007646 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session

Tue Jan 26 2021 Artem Egorenkov <aegorenk@redhat.com> - 2.4.37-39

- prevent htcacheclean from while break when first file processed

Tue Jan 26 2021 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-38

- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache

Wed Dec 09 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-37

- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key

Mon Nov 30 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-36

- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()

Wed Nov 11 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-35

- Resolves: #1651376 - centralizing default index.html for httpd

Fri Nov 06 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-33

- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation

Thu Oct 29 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.37-31

- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer