[ol10_appstream] httpd-tools-2.4.63-13.0.1.el10.aarch64

Name:	httpd-tools
Version:	2.4.63
Release:	13.0.1.el10
Architecture:	aarch64
Group:	Unspecified
Size:	453153
License:	Apache-2.0 AND (BSD-3-Clause AND metamail AND HPND-sell-variant AND Spencer-94)
RPM:	httpd-tools-2.4.63-13.0.1.el10.aarch64.rpm
Source RPM:	httpd-2.4.63-13.0.1.el10.src.rpm
Build Date:	Tue Mar 10 2026
Build Host:	build-ol10-aarch64.oracle.com
Vendor:	Oracle America
URL:	https://httpd.apache.org/
Summary:	Tools for use with the Apache HTTP Server
Description:	The httpd-tools package contains tools which can be used with the Apache HTTP Server.

Changelog (Show File list) (Show related packages)

Fri Mar 06 2026 EL Errata <el-errata_ww@oracle.com> - 2.4.63-13.0.1
```
- Replace index.html with Oracle's index page oracle_index.html.
```

Thu Feb 12 2026 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-13

- Resolves: RHEL-145713 - [RFE] Need miliseconds time stamp in ErrorLogFormat

Fri Jan 02 2026 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-12

- Resolves: RHEL-135053 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
  via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135036 - httpd: Apache HTTP Server: CGI environment variable
  override (CVE-2025-65082)
- Resolves: RHEL-134468 - httpd: Apache HTTP Server: Server Side Includes adds
  query string to #exec cmd=... (CVE-2025-58098)

Thu Dec 18 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-11

- Resolves: RHEL-131829 - Fix error page messaging when error handling fails

Thu Nov 06 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-10

- Resolves: RHEL-125880 - mod_ssl: allow more fine grained SSL SNI vhost check
  to avoid unnecessary 421 errors after CVE-2025-23048 fix

Fri Oct 24 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-6

- Resolves: RHEL-122290 - mod_proxy_hcheck may stop healthchecks after a child
  process is reclaimed

Mon Sep 08 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-5

- Resolves: RHEL-92663 - Image mode: The dir /var/www is not created when
  updating system in image mode

Sat Aug 16 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4

- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
  upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5

Mon Jul 28 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-3

- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
  connections

Thu Jul 24 2025 Joe Orton <jorton@redhat.com> - 2.4.63-2

- mod_dav: add dav_get_base_path() API
  Resolves: RHEL-105255