Package httpd-2.4.37-65.module+el8.10.0+726+ffd8c55e.5.x86_64
| Name | httpd |
|---|---|
| Epoch | 0 |
| Version | 2.4.37 |
| Release | 65.module+el8.10.0+726+ffd8c55e.5 |
| Architecture | x86_64 |
| Website/URL | https://httpd.apache.org/ |
| License | ASL 2.0 |
| Build Time | 2025-09-04 22:23:22 |
| Build Host | builder-x86-03.inferitos.ru |
| Summary | Apache HTTP Server |
| Repositories | AppStream |
| Description | The Apache HTTP Server is a powerful, efficient, and extensible web server. |
| Errata | INFSA-2025:15123 |
| Size | 1449 KiB |
| Source Project | httpd-2.4.37-65.module+el8.10.0+726+ffd8c55e.5 |
| SHA-256 checksum | 92820c733ce25065cbe59958ca3f6c789f0b0af3dca603d19d037dd4c00ffc26 |
×
![Full screenshot]()
* Mon Jul 28 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.5 - Resolves: RHEL-99944 - CVE-2025-49812 httpd: HTTP Session Hijack via a TLS upgrade - Resolves: RHEL-99969 - CVE-2024-47252 httpd: insufficient escaping of user-supplied data in mod_ssl - Resolves: RHEL-99961 - CVE-2025-23048 httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption * Tue Apr 22 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.4 - Resolves: RHEL-87641 - apache Bug 63192 - mod_ratelimit breaks HEAD requests * Wed Jan 29 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.3 - Resolves: RHEL-56068 - Apache HTTPD no longer parse PHP files with unicode characters in the name * Tue Aug 06 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.2 - Resolves: RHEL-46040 - httpd:2.4/httpd: Security issues via backend applications whose response headers are malicious or exploitable (CVE-2024-38476) - Resolves: RHEL-53022 - Regression introduced by CVE-2024-38474 fix * Thu Jul 11 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65.1 - Resolves: RHEL-45812 - httpd:2.4/httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474) - Resolves: RHEL-45785 - httpd:2.4/httpd: Encoding problem in mod_proxy (CVE-2024-38473) - Resolves: RHEL-45777 - httpd:2.4/httpd: Improper escaping of output in mod_rewrite (CVE-2024-38475) - Resolves: RHEL-45758 - httpd:2.4/httpd: null pointer dereference in mod_proxy (CVE-2024-38477) - Resolves: RHEL-45743 - httpd:2.4/httpd: Potential SSRF in mod_rewrite (CVE-2024-39573) * Wed Jun 12 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.4.37-65 - Resolves: RHEL-31857 - httpd:2.4/httpd: HTTP response splitting (CVE-2023-38709) * Fri Feb 16 2024 Joe Orton <jorton@redhat.com> - 2.4.37-64 - Resolves: RHEL-14448 - httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122) * Wed Feb 14 2024 Joe Orton <jorton@redhat.com> - 2.4.37-63 - mod_xml2enc: fix media type handling Resolves: RHEL-14321 * Sun Dec 10 2023 MSVSphere Packaging Team <packager@msvsphere-os.ru> - 2.4.37-62 - Rebuilt for MSVSphere 8.8 * Thu Aug 17 2023 Johnny Hughes <jhughes@redhat.com> - 2.4.37-62 - change for CentOS Stream Branding