[ol7_software_collections] httpd24-mod_md-2.4.34-15.0.1.el7.aarch64

This module manages common properties of domains for one or more
virtual hosts. Specifically it can use the ACME protocol (RFC Draft)
to automate certificate provisioning. These will be configured for
managed domains and their virtual hosts automatically. This includes
renewal of certificates before they expire.

Changelog (Show File list) (Show related packages)

• Wed Mar 11 2020 Tianyue Lan <tianyue.lan@oracle.com> - 2.4.34-15.0.1

  - replace index.html with Oracle's index page oracle_index.html
  - update vstring in specfile

• Wed Nov 13 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-15

  - Related: #1725922 - duplicated cookie in Apache httpd with mod_session

• Tue Oct 08 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14

  - Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
    dereference in mod_remoteip
  - Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
    scripting in mod_proxy error page

• Tue Oct 08 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-13

  - Resolves: #1744120 - Unexpected OCSP in proxy SSL connection

• Fri Oct 04 2019 Joe Orton <jorton@redhat.com> - 2.4.34-12

  - Resolves: #1725922 - duplicated cookie in Apache httpd with mod_session

• Tue Sep 24 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-11

  - Resolves: #1678567 (CVE-2018-17189) - CVE-2018-17189 httpd: mod_http2:
    DoS via slow, unneeded request bodies

• Wed Aug 28 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-10

  - Resolves: #1745695 - CVE-2019-9511 httpd24-httpd: HTTP/2: large amount of
    data request leads to denial of service
  - Resolves: #1745680 - CVE-2019-9516 httpd24-httpd: HTTP/2: 0-length headers
    leads to denial of service
  - Resolves: #1745683 - CVE-2019-9517 httpd24-httpd: HTTP/2: request for large
    response leads to denial of service

• Wed Aug 07 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-9

  - Resolves: #1696140 - CVE-2019-0217 httpd24-httpd: httpd: mod_auth_digest:
    access control bypass due to race condition
  - Resolves: #1696095 - CVE-2019-0220 httpd24-httpd: httpd: URL normalization
    inconsistency
  - Resolves: #1677498 - CVE-2018-17199 httpd24-httpd: httpd: mod_session_cookie
    does not respect expiry time
  - Resolves: #1707636 - fix a regression introduced in r1740928
  - Resolves: #1669213 - `ExtendedStatus Off` directive when using mod_systemd
    causes systemctl to hang
  - Resolves: #1673019 - httpd can not be started with mod_md enabled

• Wed Apr 03 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-8

  - Resolves: #1695429 - CVE-2019-0211 httpd24-httpd: httpd: privilege escalation
    from modules scripts

• Tue Nov 06 2018 Luboš Uhliarik <luhliari@redhat.com> - 2.4.34-7

  - Resolves: #1646937 - Unable to start httpd
  - Resolves: #1638711 - comments should be allowed at the end of Allow from
    statements