<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="10">
<package pkgid="04cd2d9975ea0826e9ef664ede8fece277ebd7abbc34868b83b9fc2b6cfa4115" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
<package pkgid="211b3f2a24f204b9effd2382541925fe6f9192ffae2c919ca20e5394d9046085" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
<package pkgid="66cde6614402938c2e8a170ef12a3f104e45efa15776f1dd8f0c7eceac1c1731" name="httpd-filesystem" arch="noarch">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
<package pkgid="8686f006688440fc4f7e2492fb45250adc8f71ef267540fdb89858efaf7c26fa" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
<package pkgid="50a5059c1a0a33fc42380288680dfcaf532a8f3987c327f6ae0bbd39ab4a42d0" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
<package pkgid="b2266ede2730216d46f3601484c097958ffaa0e4ca5724c9c60de2ee9d08ee90" name="mod_http2" arch="x86_64">
  <version epoch="0" ver="1.15.7" rel="3.module+el8.4.0+8625+d397f3da"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.13-2" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.10.16-1" date="1522324800">- update to 1.10.16 (CVE-2018-1302)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.10.18-1" date="1524052800">- update to 1.10.18</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.10.20-1" date="1525262400">- update to 1.10.20</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.11.3-1" date="1539691200">- new version 1.11.3
- Resolves: #1633401 - CVE-2018-11763 mod_http2: httpd:  DoS for HTTP/2
  connections by continuous SETTINGS</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.11.3-2" date="1554379200">- update release (#1695587)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.11.3-3" date="1567080000">- Resolves: #1744999 - CVE-2019-9511 httpd:2.4/mod_http2: HTTP/2: large amount
  of data request leads to denial of service
- Resolves: #1745086 - CVE-2019-9516 httpd:2.4/mod_http2: HTTP/2: 0-length
  headers leads to denial of service
- Resolves: #1745154 - CVE-2019-9517 httpd:2.4/mod_http2: HTTP/2: request for
  large response leads to denial of service</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.15.7-1" date="1586865600">- new version 1.15.7
- Resolves: #1814236 - RFE: mod_http2 rebase 
- Resolves: #1747289 - CVE-2019-10082 httpd:2.4/mod_http2: httpd: 
  read-after-free in h2 connection shutdown
- Resolves: #1696099 - CVE-2019-0197 httpd:2.4/mod_http2: httpd: 
  mod_http2: possible crash on late upgrade
- Resolves: #1696094 - CVE-2019-0196 httpd:2.4/mod_http2: httpd:
  mod_http2: read-after-free on a string compare
- Resolves: #1677591 - CVE-2018-17189 httpd:2.4/mod_http2: httpd: 
  mod_http2: DoS via slow, unneeded request bodies</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.15.7-2" date="1597665600">- Resolves: #1869073 - CVE-2020-9490 httpd:2.4/mod_http2: httpd: 
  Push diary crash on specifically crafted HTTP/2 header</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 1.15.7-3" date="1604059200">- Resolves: #1869077 - CVE-2020-11993 httpd:2.4/mod_http2: httpd:
  mod_http2 concurrent pool usage</changelog>
</package>
<package pkgid="16da5c4731dae94b744ece615461183faaa1cb0ffc713381d574674ada0159b6" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
<package pkgid="dcaf8f4d75aab8fe8f4127b4c6797be92e8704fdc81185568d26ab90754e683f" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
<package pkgid="ee95ee27be8c85d92d9694b8d3f868c12fcf868b5d37af191a8a539f83181c08" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
<package pkgid="6542c9aad39370bb65b2e7ea2fa37519ac8c70ba2a4514b3c42a69864a32632e" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.37" rel="43.module+el8.5.0+13806+b30d9eec.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-35" date="1605096000">- Resolves: #1651376 - centralizing default index.html for httpd</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-36" date="1606737600">- Resolves: #1896176 - [RFE] ProxyWebsocketIdleTimeout from httpd
  mod_proxy_wstunnel
- Resolves: #1847585 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-37" date="1607515200">- Resolves: #1883648 - [RFE] Update httpd directive SSLProxyMachineCertificateFile
  to be able to handle certs without matching private key</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-38" date="1611662400">- Resolves: #1918741 - Thousands of /tmp/modproxy.tmp.* files created by apache</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 2.4.37-39" date="1611662401">- prevent htcacheclean from while break when first file processed</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-40" date="1620993600">- Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML
- Resolves: #1937334 - SSLProtocol with based virtual hosts</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-41" date="1625832000">- Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records
- Resolves: #1905613 - mod_ssl does not like valid certificate chain
- Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for
  usertrack
- Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression
- Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer
  dereference in parser
- Resolves: #1934741 - Apache trademark update - new logo</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-42" date="1633003200">- Resolves: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path
- Resolves: #2014063 - CVE-2021-26691 httpd:2.4/httpd: Heap overflow in
  mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43" date="1635249600">- Related: #2007235 - CVE-2021-40438 httpd:2.4/httpd: mod_proxy: SSRF via
  a crafted request uri-path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.37-43.1" date="1641816000">- Resolves: #2035062 - CVE-2021-44790 httpd:2.4/httpd: mod_lua: possible buffer
  overflow when parsing multipart content</changelog>
</package>
</otherdata>