[ol7_software_collections] httpd24-mod_session-2.4.34-22.0.1.el7.x86_64

Name:	httpd24-mod_session
Version:	2.4.34
Release:	22.0.1.el7
Architecture:	x86_64
Group:	System Environment/Daemons
Size:	110263
License:	ASL 2.0
RPM:	httpd24-mod_session-2.4.34-22.0.1.el7.x86_64.rpm
Source RPM:	httpd24-httpd-2.4.34-22.0.1.el7.src.rpm
Build Date:	Tue Dec 01 2020
Build Host:	x86-ol7-builder-02.us.oracle.com
Vendor:	Oracle America
URL:	http://httpd.apache.org/
Summary:	Session interface for the Apache HTTP Server
Description:	The mod_session module and associated backends provide an abstract interface for storing and accessing per-user session data.

Changelog (Show File list) (Show related packages)

Tue Dec 01 2020 David Kubat <david.kubat@oracle.com> - 2.4.34-22.0.1

- replace index.html with Oracle's index page oracle_index.html
- update vstring in specfile

Mon Sep 21 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-22

- Resolves: #1869076 - CVE-2020-11984 httpd24-httpd: httpd: mod_proxy_uswgi
  buffer overflow
- Resolves: #1607737 - TCP healthchecks failing falsely / not actually checking
- Resolves: #1869078 - CVE-2020-11993 httpd24-httpd: httpd: mod_http2 concurrent
  pool usage

Wed Sep 02 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-21

- Resolves: #1637891 - RHSCL httpd : mod_proxy should allow to specify
  Proxy-Authorization in ProxyRemote directive

Mon Aug 31 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-20

- Resolves: #1869069 - CVE-2020-9490 httpd24-httpd: httpd: Push diary crash
  on specifically crafted HTTP/2 header

Thu Jul 30 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-19

- Resolves: #1823836 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1600579 - mod_proxy_hcheck Doesn't perform checks in VirtualHost
- Resolves: #1809494 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set
  worker secret passed to tomcat
- Resolves: #1828812 - httpd response contains garbage in Content-Type header

Tue Mar 17 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-18

- Related: #1743959 (CVE-2019-10098) - CVE-2019-10098 httpd: mod_rewrite
  potential open redirect

Mon Feb 03 2020 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-16

- remove bundled mod_md module
- Resolves: #1788976 - RFE: updated collection for httpd 2.4
- Resolves: #1743959 (CVE-2019-10098) - CVE-2019-10098 httpd: mod_rewrite 
  potential open redirect

Wed Nov 13 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-15

- Related: #1725922 - duplicated cookie in Apache httpd with mod_session

Tue Oct 08 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-14

- Resolves: #1743996 (CVE-2019-10097) - CVE-2019-10097 httpd: null-pointer
  dereference in mod_remoteip
- Resolves: #1747282 - CVE-2019-10092 httpd24-httpd: httpd: limited cross-site
  scripting in mod_proxy error page

Tue Oct 08 2019 Lubos Uhliarik <luhliari@redhat.com> - 2.4.34-13
```
- Resolves: #1744120 - Unexpected OCSP in proxy SSL connection
```