<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="9">
<package pkgid="eab42b04afa7c2e445b812d906f99345221f563d5abadcd83dc5766712727dda" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
<package pkgid="e3cec8239d39eeca4ed1b0a0a718dad7ba7939e32db7329d042aedb882d49c89" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
<package pkgid="8b06e164a1acfaccfdaf6f450a652ea067427de719fc75632a256d2f0462da94" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
<package pkgid="1683369201acdcadb283b27ca46935ecda8d1884f4fbf802621028636c5b20d1" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
<package pkgid="8460c135072de16f6c2e5aa03a1420a95eba6b7b38b653c1f246f6d780c6d744" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
<package pkgid="a56ed3820fc590a854b90de86eff68283c808df5dbe736dba0a4d20acf1ab04b" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
<package pkgid="5b9bf19635dc7123b695f591d837d92a9dc6b51deb88d49822f3c4368867f1f7" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
<package pkgid="e9aae1548f7915bf69c2a1b5bfd8e2315d9e0e83c73cb4a2c4192fdc0b4eba50" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
<package pkgid="5435b51ef37de76292b58a4933fb861bcd1ca0e79e9f3b79a55c7e6080246f0a" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.37" rel="43.module+el8.5.0+13064+c4b14997"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-33" date="1604664000">- Resolves: #1868608 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues
- Resolves: #1861380 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1680118 - unorderly connection close when client attempts
  renegotiation</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
</package>
</otherdata>