mod_proxy_html-1:2.4.6-99.sl7_9.1> H HtxHFdw ?*}}bN."k6q'Z5IS967|\?|Ld$ ( `  #>W]dp v |  K P\kz(89:*`BzGzHzIzXzYzZ{[{ \{]{$^{Wb{d|#e|(f|+l|-|HCmod_proxy_html2.4.699.sl7_9.1HTML and XML content filters for the Apache HTTP ServerThe mod_proxy_html and mod_xml2enc modules provide filters which can transform and modify HTML and XML content.dpsl7.fnal.govScientific LinuxScientific LinuxASL 2.0Scientific LinuxSystem Environment/Daemonshttp://httpd.apache.org/linuxx86_64p[ȁdp{dpYdpYa2211995b7e55b781f68666664f0bcd84550ed9a16edee07121f63477dfaaffa44bc7446ef742126b532c9f88e97185614a387bab8d4b4237aad926e567ff71f7e4f8718e2fbc1f157c389b5420f02b414be3dc0e8193bc2f239ef782bb07effrootrootrootrootrootroothttpd-2.4.6-99.sl7_9.1.src.rpmmod_proxy_htmlmod_proxy_html(x86-64)   @@@@@@@@@@@ httpdhttpd-mmnrpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpthread.so.0()(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.5.2)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)rtld(GNU_HASH)rpmlib(PayloadIsXz)0:2.4.6-99.sl7_9.120120211x86644.6.0-14.0-13.0.4-15.2-14.11.3dp@dJcd@c@b9@aaav@a^@_}^@^|@]z@]^]A\@\[+@[+@[+@[*A['[d@[d@ZZS]@Y@YeY@YY@YY@YdYp@Y{Y{Y*@YYw2Y@Y@Y@XXg@X,X,X@XƉX•@XCX@X@XXXXO@XO@XO@XO@XXWWW{@Wc@V͛@U@Uݪ@UoUȒ@UU@Un@UY@U.RT}Tto@TXTG@T2@T @TTS@SS@S@SuSǺS*@SSRUR@RRΏ@R@RkR1@RsRrF@Ri RM\@RC@Q@QQޞ@QQo@Q@QQ@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Scientific Linux Auto Patch Process Luboš Uhliarik - 2.4.6-99.1Luboš Uhliarik - 2.4.6-97.7Luboš Uhliarik - 2.4.6-97.6Luboš Uhliarik - 2.4.6-97.5Luboš Uhliarik - 2.4.6-97.4Luboš Uhliarik - 2.4.6-97.3Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Added Source: httpd-sl_index.html.sl.patch --> This patch removes TUV branding from the default index.html - Added Source: httpd-spec_sl_index.html.sl7.patch --> The index.html file is outside of the source tarball, so we need to patch it in the install step - Added Source: httpd.ini --> Config file for automated patch script- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)mod_proxy_html1:2.4.6-99.sl7_9.11:2.4.6-99.sl7_9.11:2.4.1-200-proxyhtml.confmod_proxy_html.somod_xml2enc.so/etc/httpd/conf.modules.d//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnu?7zXZ !X#P] crv(vX0Px s㸨uCIaX$MULbTgI7$NL2mbCTsG<9 F$PtX[knip>!U( C}=QBC{(e{*homy{ R+ 2婳4{ʁwT}> |kFN~g{vc1ľg9^3@M0YU8}y~ck RQR~B75)#mMHyNl0 |0MKq|! O%[#JuJH<)MGʱ`&y 3+7+wf4<7a1뾦DF >bhU,吤oqTE &U8S5Qﲖׁ,aZ .zH0Pqi$QqAq)joi5=/?gKcxx<1+ŶhER*'Ҡ{٫Gjb)@ϙ޸m~il!/Sh<.>xM"qu;ʉc!_?r ='IZs=.!!%9U>4Nγ2'٩4mh"b,o@p Zr-lg1iT%bUXס6pKEK6_$5e4_ր?>cȣ!<"Fv: _3thmƻ?f+WUV-N6Z5.9F_!uo&S4ޚ۾^ÎtMN̠z*ƴ?-++vrld#6/ՍfVMW?K+2cV_x8 齫}>vjS^ãk Vm]lk\?E +NVҰO LvԵE =~S`J|ՖĶ#AB*Ӥn$CxM*sʅ`sΓL: \!ʏSREWCOt!':ԅ7D P&塃vSDTS|!i#9Yh&t 5,|QI[v682jpo<|nH dFh= ǹ;z͎˹>h/ϳ0Ӣ(/^ԣK/z`SlSe#%7mGx%:[0/VcS 3%2r S2H/ڃCoyZk˲3c.ĂYV[V挙:(b> =BjR ^e0 C9 g|,2Ƴз\aD3C @5C%|'$$eX_ ʨl ]3),wg,sNg^WPvɸ)(It8u`rkB'v``-Yl1J.epXicO&WJ$#&?ZJ&[o3K\lGϰ$B?f %6f'Q~.~D+nL\f|22E`PUsi"Aݬ B=U#'<1 c!M+T=g8A&WVY]UrUnJMTلCUǼ6"}_haj*ea9itr7h=lc},/;2AQtn3XjL#; 9W8 閨jl1o;2Ǟ%:N0o2#TIBRۤs\;$u2'qz+ark2neм[kH*l3vɁV4*+uhOE| {@40%H\/ugj QvE\ui8 vN: |tͅB͕-M˶m<_[g+4Bר ._ZT #]4&~CS} LT2|î`v6)Xrƚ"/2{s,eJDaFY!Fp,x6mV=QFQ?fh#JQ,0at+RR@܃U,Gh2ۥV \__ w:߸賒vT+gP$$[23I{[7X*NLY̦?ţ@4 v/#"Gsǃy ,ܒ|aΘ39f+IF,g ͨ ĆFg91`L榄?'b2 )BwRu.eb!)WSyX@6ćlC12m8j1r 9qFm]MػVl"I[?X;xFiJX]PIWeݫލVXa F1Quee6yGo3I@ry?n@ܟ|XdZ]/[eʉt`g(.2Q0s~ҾgjKs۱5Ɗ*\X ۯ*Si V!OB8IU"DƵ_&M{ߡvV/(}RBLR_5o `FҧOwbm2:x rR$j^=Mvpi? mݓ?! 7Nz[ԑؼU09Xjh7Sg F6xہ勗u;{[wU1h1CV2jGzGRtʢ 䃔f'CE4y ;9}G53 5s tTM&e%~Ztי1߫O'C/Z-@`ˎU[}1Oɧv /-i+F"37nBxlMk\Udb|Zb< MwHOBq'^pv&8,DLi7$1=k&ʋײme؏S.?C ȞYs53OgͤN.c_VıU. 2:" U}{,q>|jR7˗JM 1x4ZAAڟ|ɁՖ8oc5ln5ȭágw !] 62)d2>IL?M >Bpnu}4Az"] et6nө$(ݐ~12˂sCo[6 6z pHţW}"7Z֣J(UX2tH5`j?\kIG0_`JzF&G =Z Ƭx ~Zj _GU 0Թot|':/߻K!^^nyZht䝿ӆK?][6j]u~tg;hufE0;Ehe)DjoG׋Xձ|xHW i(u(r/4 RBZ@ɓ-a~n̉&kKk 6'[m84AwQ5*69c|uHt8xeHnBt2x='9$ q\^HP%9yzz$ť'g8{&AioZh`=9Hqd7{e(^j YNVJglCFf yuH{ms!FQ&ԏ͡6Ƌr}F,2w"{9Um ۀXD2 JΞijcuV/ѭ$"ϕ$ȍe؄T`\wAxg,W|Z(M=HOP-Q]q  e1$XtxLކ (*?/뵐O_̒[eɷ0jZE8zڬ:KOLSuns@ 0|˒G ȇPD ݄<~XS ѵ P=@ݖc녇D7+k'U0&L{]aAx8)nJ2RQ䶲x.mh@gԘ (gH7:Z(J>pqXV&7.!"+:~[ ˝G Ѧ]"}iiWvĶpw63(iJ>3EF$B^m 7W7?~C߀IE?nuŸ(5ZtZ+\qǚaGJvC k+~+oT`w^#2qT<|}T5,;J*§=Cv.GLV}AowŽ5AGbi5B$ ¥ 4c79-]%X1UkF#gpJI<p/({(_kwhO.˃0~Ig{^[%Sf7{p.rMPOQC@2Xumݠ@dN!ZYCY"{֨5O~Hyڦ7Gp'CT,D'*ύG$QgQ# 옛Kp$P`5|*\P5%p};\S/wð!y99s!˼aBW{!di&BHiJLp; yS!,@4@Y!*Pa!ӻRȟ-y#GZ0J/))g5.V.. Ҡ0F Gޏ'3"E̫˰*7l›dB+W1rUXW:L{ 0Eg"pv< M#7#WD"%ES1/!2I2yN#@l_gr/gsOFcI\U=+R}TR&ġN" nf/EҞ)vt}k.BVtJ+y^Pat<o"5ViC.Uuᛝ呝6َĠVH}(SYDnbj=\0)aͬXtm8m*]0j} mЬMd&r6mg_S!s *8(:)q6/V@{$3q26T%t@~[ o{Qpl>ϞHH}S\*$#5j8Q^D:28"b#Wu1bv%QH/b"}0:epr칾̉INQO2+3n鴴 #hjI矪;io(~-:i?V0GǴ?"wr:*sv\$c NDi,qQ"FNw4Mk& 4 Em%kLR`T=1衒dW5TX8 7A4#ÆS r+k*Q5YFhnv|eQ'(c`%`xsepyc6kYb$=(+(KV+N y"9wHRZE =9 9<^՜QnZ[Nm[.#)9'6Q42(VԜU#DkYۑh}$%Fu' *E"}ej [D_ ۲Uj|ܴnΊ?BGͱ*Ͼfx)vKj{rLϸ,,sʮ/)@/dnh,r!S8̫B,`dh_{~*ψ hë}=4#;g2ń;b8c0UgǺH.Z2G_MY5N&BL,kx&SvIZ@/p*lO%$ pAQQ8HSO.ρ:2y^!:ɰTwI5ဂԚq8ҜEQhE32wD,e=T$ MX8>W$mұYY[/0ą]pMyyXa\臖єigB6 LeaG]>ߏ9EJQ w d)+h?+֑ȝ˄P_~wb4_oSѫo6i%s3<@~3pey-aLQ/`FV9>e~,Ծ^[w U 򺅂57UM"ꆣ0t d G y'' 0j4y@usSQhq23n߸8.L-8M汦]I0L^x^ӫ݁OpNsFe3`{OuY_9 P9dPB"Z΍zf"=Ʊa*%-{p0_OS.c`Z+l-JҶ^kS1ȗ J0MP!u/^+V$S{4*UXHx)5-Z۩8nb5Vs.@9EkBnPJc~'Z"iׄns!|p3`r.ڪ} G"5Y;?ّ=kH@*?4k] &RRۇ⭏JvU)H8\eQxʡ=B St_8$WHJz>}@WP=.gSr{DQDE3_ge*TFgsdUXq#a,;}YJSf])Brap }ǝ2YPw1S.Oh;uSecH fDGbΒE<Cf}yʢtCƌmܙGRJrn]Zo^/Ii#/N;#*AB,4t.M:}M"n HB$$$q-U( l7 Y/J ]ilϚ^.^9=Oojp7*9h}J$436}N~OCmL 6:S&dlrG R9E|U9ys!ЮwMb|}flC g>biGWhdl3x;SdR/ љ`8E3[a z҅z{J8vUaŕ^(}z؟%W'NX[Qc6Vᶌkq2nH!AH^{OulI*4w(lB|_09,(O(cZv& 9E;QBj^_,[*˰gWj0sKo<Bv<~[jy|g{\]R/+7|ye֧PL/g CH})C^~4k~x0H¼N F#[vc4ˠo*rhRk&a~VnEsglL%G{Kce3l ~%rV(L(Hb-AYkgYZ11d Ez~GjPl3|fU^ %dx݀<߅ܺ9ȓw~"Y Bdgܓh3|iLˆO{svYw!!?E8?jfeF(($7lf=(Jc×F>E"3"S.J~# ?a+ԍ*~Tȁ6+六hk\ H}@_gᔶξ?!6޵.x ;Z3}Fm"5;57RQZHzWJrpJ#cC$NpJzvwePoďjpoc*(q<דG51ZHdg;o^ɿI@H7K8dm>W)о1x(&4'`r {X WbY>5:LZ#Wpv-P2tL\ǚFh9n@΂ JQZdHXnowMO ҋOen|zz1eL QWpy$E7ȕܶOeջb`acs^r%1G-k5tᤸ0iYg5t< #7VRM<A椎6'/7K9G@gjօz uk&8s5ʽaf(wESA!=HkI([n!.Dpj$`wif-ǝ 'M9oe W8 ^"ZZ!bR/+k#5jlWE^-ZC<"&^2+; 2缾GmEdxyG`k "w6sQӾ~:?dЯ^s7'!er6!ڞTNi}C^+RR`K[hçx'꘮Rf7mLqF Z]))D;]6԰@K\ӓJYDc5 gr1F3u[kMp;״дb4͉sfw$ X1}6\}n<9O Eo }KO 8~]|-*V&βt \/? 3L=ocwNh5'c``a 9o;TSOFVI\ _w։98v>,PP|ʠrƈ1O%5xE6!.;y Rt_[# 0K멕@nȐbNUP;4U$PxP6b.OޕjWEt~g#qW2 {Zp0l;; B^.VdׯZ޽>yeN 4܋6MwbȲ4AwStIwv+kmpR D|(uXDXS#KyiUt;rDiHKjy. im`{D gxFP2hNw.3Bx)p9@W ʠWŔ kGe?=w_콟yb7zvBp ;_MINU-mO+1v ݆3c\,n~H QnG5j~',fmnZf0QUh/zErHÔd+ fx*kafͥI^hݖmlv׋Ƌ5jh#\'<F65"LSDLqH[D="[Wo+ze/.%5EbU@i}N"X;*H!tJ7 O;AX)FRP' bf{|1R7~|_]|?gW>E/8 Ui"H}'r^ɼw4n4ag|1٨F9 i4Oᙉ258$ y݄MF@Qҧx0T\d%c#kqj)vS 8MQ+=,4^o"O rhq 2F2z/e;6+UwrF $>㷟؟}!f'qw/mWag&iۣO; Rs %rNA}[41QopZ5(1ȸWAvkߛ î9>^}6}@aмh0|)SR: Hn;)0vϥx3\C| N=yU~[" Ť+_$&dl=~1wyo >bWo䡗AHz]}ܼZLݖcQM@Z[d HdZ•V mJo0)#9an*ˁFVe/T Y'@U1p/߳$廦ȋ|rܹL4..aCިkeB`R? Q`Q< Hg70Պ '8Oė, )ЌK5`};}p'G'! V'YZH9 ޗJhC7:"uaUtĸSOD҂I90a C] 2bpsYb!QWg.'*0Nͮ bZcۏ)fNҍ>:\tPyhX)tt|>!hDAbl8#)h=V.oeZqm%jK[y  0_J7$\*nnAq{SjT[Nw!ɇ>FȤI_+Djs>[/$GW\e'$t|rx!]ϒE?F o 6q mUF3E)^KY=~0|jRț&`6Y,(&@ck+F63rMV\'S`49bÇK((zck;PL]SQ!1w#~ESKfP? #7/)p0ahќa-ug-MMmvwYm^diPmDg 8F&ua0o ,[PPwHff6фiybe j2c |mXHD;7DіtJPwbS%kye|u룮Ny R!MJZwrS=a% QVz W夗@V0[3tSDیnI|u_z6jHDK/9M PWMzِCB3zTci IvV,+/Dݱ%*]Px&8"mgר,m+MCF1S'X9sry .I3|U֦8iÒ_JLSZ~FEvP=^͹vI׃,XO.@<v@~ν-G9e0[WIt5OS9ufXWT| 'c6//KDYsGfAXwl=D*C|ϘB>_Ǘ| E@@C(vs yZt>D$V=2,Y?rONLӽקv*>'?Ո~uO&AySP(l B:F Ȧ}|v(Y!JH+ c$~m Wl(W]EA@϶S:r6-8<Ns],Ur+@?.^7kqAU)+kǀBP$Ү9x~Cעb$w\9v亣;֙}1: NƑr(SC>7gk6?6d}uL:)+?yDym#g @Lbxa&9U`+2L8D,Uta]/6m=! X>!b3$ 䚸>~'Ӓ rN|W6rCQ|;G@MR2X0N4</~ohWEiW:Fi3Ѻ-97oykBtGև`k Zٕ8:XVVxS|wvPBܳh  U +c u WDڳ~&pMk!aU:8/CCx?FE<>Kdj.~1+GxƧ-ŷa%WgV;+kũɼS/R'2"ЕᚍD']s(XagDu^aM1]LAP8|g% $1nQ+v\K9[!&#JA4.'l8UMJ\ H.E&кr0Oxt 4~t_<38kjED+&UZDj Q ^iu X,$ dĊ5N~UgQ7zR5*X j]`On7n9LO#GIbs7l)hpy'II% Dd3HԆ2F)D6GԭXSǧz\Jp! 0fm$Rh@K_IEUؑXRHS۔~*܊Wo&:OS99e6Wtib -iʽ[J̊0O =9ɿZx)$r1x(|tdmo%X{2I[Bf GdVgc kՐKjR0΢#);fiBͯ{!ӢB\^e`(з!3N98.!&,L.B"3Mon߱QI ՑL(j2Sܭ6 ϸQ+V{2M7i`iMߪ74YtN:e*AEcżJe{?dJLJ2瑙:H, 9&|"Q@\\yzEZrDhXwWi~V<^&"U4[ށ4\&I@0AtWzIFpgwMm^^[|\נw6@n, ttbp?J\e.AE%SR%\ n9 ՙlIÏ͆jq^)|oLZsNa^Y0qGgT(yCeDwFk}.S oGoFr8I"7 .Qa\pܟ#y "v/@[T̥4/HBdKlPϪ$Uoc=ud7~Ėȴ2gq?+\3ip ea37l$__s/#m>g")[iT]!.ߒS{%QwDҡ?> _jNقLS㠋&OyFaHy~$1c[%%IrD7Zjwvž!FUAZV<%>(±>V:7~ѡb}#Nτ8PC$NàN5>wi6׬vO q*"®v*`_*f c wv7BP[6/u#6-e5Ca*7I&*-L\ԍ,M$bFֳ֗>LQ(\OpGu߻a{܃6V$Ƅ͔"Kճ8ضD%3gFJ.$L,:^߶N.Vْ[!YYVЧYGW.;3 9Trѐm!{Ixy=|dt.(6ro"T\'KI\`zjzb)}ԪV %KAV]]@YѨX@6夿Yqr%!(ȫU߀ͣ Mco "'Ѿ)e_ro2m\Ґm &N'ʜ/ &8kAOq1lheֆcGN֘gv7Ml]]U"~dӄ!i=kz! X5,-N Ζ|Iyw$qξ5-ʇz-ػ@8|< _--tҪ 1ZSe']ae 3cDƣh cz7S6w 8r~rgShC)HZ WJ_|oHYEy6VȞ B{A;kNu[K۲<*//Gĭv4(=ݲ7CVT'CVi+F޶SCu˳BۗNboynhuQKaG)*z;.᱂M.#3NC؊'TjQiNAߵcgB`լ}.-ml"%ho R0f*b.`qb'h4n,ߋ[k'&')>P^E6:OJK^AjxPs?N_.";p!h`WAυ$D87!j&t6ĎDhRt\`7J v4t=0ocLy`Z,(]ieo[|3duyu3tn6H)