<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="9">
<package pkgid="3623d4db5cfca0f84b70e5141f566a8dd22db6eb88922c454ec98b86b56d6a30" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
<package pkgid="fd48d956342aea7303dee7c888dcc7ebbb035717baabcf8982563c7c9ff5a1c8" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
<package pkgid="a9d3d88bdb9673cd5ac55158b057491fcf4f7c1d2ecb0c2bb30a68cfb05722b8" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
<package pkgid="9dad89eba7638bb2102fa331b39bc3b078d4d8aeea6d9921c859e3f732a21dd8" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
<package pkgid="92b3fa58f368aa156ef46301a247d1d1602fe0945eafced6599879ef89c2bd72" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
<package pkgid="71529d49d63885b5e5c427f0408b2cd8bd2971e7a77fe7a335403c87d5eb579d" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
<package pkgid="bff3e9bf9656d793104f15fbbf6d294ce4321e183236f7de02a11ee56303da23" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
<package pkgid="4672c39700bf4b0abd3be2b859f344ef57a4ee8ad064c22413862f5142822328" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
<package pkgid="99c1aa9803c54139cdd1ea095b94a591113ae96600edb0ec3b6bce71cf01c358" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.37" rel="41.module+el8.5.0+11772+c8e0c271"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.37-30" date="1592222400">- Resolves: #1209162 - support logging to journald from CustomLog</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-31" date="1603972800">- Resolves: #1677590 - CVE-2018-17199 httpd:2.4/httpd: mod_session_cookie does
  not respect expiry time
- Resolves: #1869075 - CVE-2020-11984 httpd:2.4/httpd: mod_proxy_uswgi buffer
  overflow
- Resolves: #1872828 - httpd: typo in htpasswd, contained in httpd-tools package
- Resolves: #1869576 - httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive
- Resolves: #1875844 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1891829 - mod_proxy_hcheck Doesn't perform checks when in
  a balancer</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
</package>
</otherdata>