<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="11">
<package pkgid="39f499efb4211fe131305ad286ec20550a70a0e44be2ed511c8f26cac09220c4" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="a5c99e757eb0532d8f2918c82ae43ba27a3b111bd969d514693a42cafef2cecc" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="063981ab5da0678ead2dd9761c70f4062523377a2f0b4a94628ad2e78d51a775" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="a4eab97e8a17c30b5904206856bde9385a1cb27952dfde2eebec08bd554947db" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="54d021ed53f3b910919c6da2a76f456cdbd7c4b098a7d27504f1dce801de07b5" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="580d66facb3763a4091ab449d5432617879c07c55787f8355c92f9695877522b" name="mod_http2" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="3.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.10-2" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.10.12-1" date="1508500800">- update to 1.10.12</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.10.13-1" date="1510056000">- update to 1.10.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.13-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.10.16-1" date="1522324800">- update to 1.10.16 (CVE-2018-1302)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.10.18-1" date="1524052800">- update to 1.10.18</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.10.20-1" date="1525262400">- update to 1.10.20</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.11.3-1" date="1539691200">- new version 1.11.3
- Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
  connections by continuous SETTINGS</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.11.3-2" date="1554379200">- update release (#1695587)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.11.3-3" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="e3bfc6471c07bc47bb6bec0abe8d09a571c949b05d36361a710c1cb624701eb8" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="5cf6346761e198b315f208f3a08faacecc0be0f897d773c4c116e3471df3f3f1" name="mod_md" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="ef8304c9fb6ee94c1fbca470517e34a5d1927862ed251344e4ed43f6c4996d70" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="e228405df666efd9dc6e4bd1ae3ec4f1b55766f1553b34403409ea8c67044ca6" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
<package pkgid="5f89796513aa30d470dfa400bf1e02965e610bd2f0fc23648c626c66f018ed31" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.37" rel="12.module+el8.0.0+4096+eb40e6da"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-3" date="1542974400">- Resolves: #1643713 - TLS connection allowed while all protocols are forbidden</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-4" date="1542974401">- Resolves: #1641951 - No Documentation= line in htcacheclean.service files</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-5" date="1543233600">- Resolves: #1652966 - Missing RELEASE in http header</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-6" date="1544443200">- add httpd.conf(5) (#1611361)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-7" date="1544529600">- add DefaultStateDir/ap_state_dir_relative() (#1653009)
- mod_dav_fs: use state dir for default DAVLockDB
- mod_md: use state dir for default MDStoreDir</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-8" date="1549022400">- add security fix for CVE-2019-0190 (#1671282)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-9" date="1549368000">- Resolves: #1670716 - Coredump when starting in FIPS mode</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-10" date="1549454400">- Resolves: #1672977 - state-dir corruption on reload</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-11" date="1554292800">- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
  from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control 
  bypass when using per-location client certification authentication</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-12" date="1567080000">- Resolves: #1744997 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745084 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745152 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request
  for large response leads to denial of service</changelog>
</package>
</otherdata>