<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="80">
<package pkgid="8635168a9d784935b17666b0c98dbf54a11e8918" name="httpd-manual" arch="noarch">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="d570621ea2145ca43da20713f1bde3304910e06c" name="httpd" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="c8a318ec480b2ba8f2e7c5d63c97732f20c4a306" name="httpd-core" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="dcdae2db6f22558839b26a149f2bfc6f7ed9498a" name="httpd-tools" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="11593f3f0ab97f853187567428b2a55c6b500dbe" name="mod_ldap" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="0b6edaaf82911275fd79c727119e6f0d0f062bec" name="httpd-core-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="01d429d512123b99c341801adf92d8707b131d76" name="mod_proxy_html-debuginfo" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="0d266e6fc1bd3b061c4238c0433a2f8c5aa0559e" name="mod_ssl" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="3ce4ffc06489bc9dba0d36fece66027133de31fa" name="mod_proxy_html" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="a4fc559d6a07db7af6d96aa4dcb3a3833786d1bb" name="mod_ssl-debuginfo" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="ef405fa7eebdf9cd14ebf8ac9699fab7e08d323a" name="httpd-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="04f90168e85dd231c93794f16d058f2835d67ef3" name="httpd-debugsource" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="3dee638919471a04547362fcd2b9779f2232d180" name="mod_ldap-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="5fd135258ff7181b2d7a233f5cf4373238a73956" name="mod_lua" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="0122e5b3cd17105f5310d4ebd0897d7f04c77df2" name="mod_session" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="fcb93fbbf789e0c038ed0db97581916c0d448b96" name="mod_lua-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="a60da30e5ace0b5240435305e21eea7726186f36" name="mod_session-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="c6722d66a93ddd229d30ad66e623fa0de4ede846" name="httpd-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="3f93625dc1f90cde6b4ee407f1cc9558314f4b72" name="httpd-devel" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="8ebf8f370c42f10c4af3cd22e6af904ba4dccbdb" name="httpd-filesystem" arch="noarch">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="f5db53e99b9b3004ea2c517833777dc4adaf5e90" name="httpd-core" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="bd151b1fb120f6838c77ec39dfedc50397f122e0" name="mod_ldap" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="10fcda154965bb6d69810c1c63b40173a5d5c27b" name="httpd-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="a84ec2156c4818070cca195e2fc5578510a78c1b" name="httpd-debugsource" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="95ee8b98ea759a96c6b5308dd1e8dbfbc611a0c6" name="httpd-manual" arch="noarch">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="4d4a015c1f0673e53b7b9a1e10e24a050c5b1b9b" name="mod_lua" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="bbcb322a926de1007e4bb588d860823332774c7c" name="mod_lua-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="71524533da4b2429f1e81ad4f1d92db78bfb4c73" name="httpd-core-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="c604c0c2ae6cf5fff6eef3dbdd626aefeb212d39" name="httpd-devel" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="02215ea758e8d91ac354f76e176c39102a6f12bc" name="mod_ldap-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="fc6cd4542ac380d4d875fd2e84ca725806540b40" name="mod_session-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="c2a4f7428434fb4efbd424cff9cae52e6703db52" name="mod_session" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="52d06b9542dd906b90a304330344c0f46954152a" name="httpd-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="fe657dd8a74800178c63fc9a50efc4a44402da4e" name="mod_ssl-debuginfo" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="1646b0d603cce849c45929bd25b89ff82e360e09" name="httpd-tools" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="4a97ca56d288e9aa3d996be6c4a2af5ad6c3ff2b" name="httpd-filesystem" arch="noarch">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="7abe8a8a14140d024429fd76d8e1121189a2645b" name="httpd" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="6d0d5169e4633cc9ae8645e58dc8baa2010908e2" name="mod_proxy_html" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="163946c90957079d11a9656d6f07d7ca00446bb6" name="mod_proxy_html-debuginfo" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="247620c9bd38e39accd901058a177f069ea7b4f4" name="mod_ssl" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="8635168a9d784935b17666b0c98dbf54a11e8918" name="httpd-manual" arch="noarch">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="d570621ea2145ca43da20713f1bde3304910e06c" name="httpd" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="c8a318ec480b2ba8f2e7c5d63c97732f20c4a306" name="httpd-core" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="dcdae2db6f22558839b26a149f2bfc6f7ed9498a" name="httpd-tools" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="11593f3f0ab97f853187567428b2a55c6b500dbe" name="mod_ldap" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="0b6edaaf82911275fd79c727119e6f0d0f062bec" name="httpd-core-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="01d429d512123b99c341801adf92d8707b131d76" name="mod_proxy_html-debuginfo" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="0d266e6fc1bd3b061c4238c0433a2f8c5aa0559e" name="mod_ssl" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="3ce4ffc06489bc9dba0d36fece66027133de31fa" name="mod_proxy_html" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="a4fc559d6a07db7af6d96aa4dcb3a3833786d1bb" name="mod_ssl-debuginfo" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="ef405fa7eebdf9cd14ebf8ac9699fab7e08d323a" name="httpd-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="04f90168e85dd231c93794f16d058f2835d67ef3" name="httpd-debugsource" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="3dee638919471a04547362fcd2b9779f2232d180" name="mod_ldap-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="5fd135258ff7181b2d7a233f5cf4373238a73956" name="mod_lua" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="0122e5b3cd17105f5310d4ebd0897d7f04c77df2" name="mod_session" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="fcb93fbbf789e0c038ed0db97581916c0d448b96" name="mod_lua-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="a60da30e5ace0b5240435305e21eea7726186f36" name="mod_session-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="c6722d66a93ddd229d30ad66e623fa0de4ede846" name="httpd-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="3f93625dc1f90cde6b4ee407f1cc9558314f4b72" name="httpd-devel" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="8ebf8f370c42f10c4af3cd22e6af904ba4dccbdb" name="httpd-filesystem" arch="noarch">
    <version epoch="0" ver="2.4.54" rel="6.rhe8x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="f5db53e99b9b3004ea2c517833777dc4adaf5e90" name="httpd-core" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="bd151b1fb120f6838c77ec39dfedc50397f122e0" name="mod_ldap" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="10fcda154965bb6d69810c1c63b40173a5d5c27b" name="httpd-tools-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="a84ec2156c4818070cca195e2fc5578510a78c1b" name="httpd-debugsource" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="95ee8b98ea759a96c6b5308dd1e8dbfbc611a0c6" name="httpd-manual" arch="noarch">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="4d4a015c1f0673e53b7b9a1e10e24a050c5b1b9b" name="mod_lua" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="bbcb322a926de1007e4bb588d860823332774c7c" name="mod_lua-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="71524533da4b2429f1e81ad4f1d92db78bfb4c73" name="httpd-core-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="c604c0c2ae6cf5fff6eef3dbdd626aefeb212d39" name="httpd-devel" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="02215ea758e8d91ac354f76e176c39102a6f12bc" name="mod_ldap-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="fc6cd4542ac380d4d875fd2e84ca725806540b40" name="mod_session-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="c2a4f7428434fb4efbd424cff9cae52e6703db52" name="mod_session" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="52d06b9542dd906b90a304330344c0f46954152a" name="httpd-debuginfo" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="fe657dd8a74800178c63fc9a50efc4a44402da4e" name="mod_ssl-debuginfo" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="1646b0d603cce849c45929bd25b89ff82e360e09" name="httpd-tools" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="4a97ca56d288e9aa3d996be6c4a2af5ad6c3ff2b" name="httpd-filesystem" arch="noarch">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="7abe8a8a14140d024429fd76d8e1121189a2645b" name="httpd" arch="x86_64">
    <version epoch="0" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="6d0d5169e4633cc9ae8645e58dc8baa2010908e2" name="mod_proxy_html" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="163946c90957079d11a9656d6f07d7ca00446bb6" name="mod_proxy_html-debuginfo" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

<package pkgid="247620c9bd38e39accd901058a177f069ea7b4f4" name="mod_ssl" arch="x86_64">
    <version epoch="1" ver="2.4.54" rel="6.rhe9x.iworx"/>

<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-5" date="1641816000">- Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-7" date="1647864000">- Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier
- Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
  in forward proxy configurations</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.51-8" date="1649678400">- Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using
  SetEnv or PassEnv</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-1" date="1653998400">- new version 2.4.53
- Resolves: #2079939 - httpd rebase to 2.4.53
- Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending
  with core</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-3" date="1654084800">- Resolves: #2065677 - httpd minimisation for ubi-micro
- minimize httpd dependencies (new httpd-core package)
- mod_systemd and mod_brotli are now packaged in the main httpd package</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-4" date="1655380800">- Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-5" date="1656072000">- Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove()</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-6" date="1656331200">- Related: #2065677 - httpd minimisation for ubi-micro</changelog>
<changelog author="Luboš Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.53-7" date="1658318400">- Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
  smuggling
- Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in
  ap_strcmp_match()
- Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
  by hop-by-hop mechanism
- Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
- Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
- Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
- Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
  with websockets</changelog>
<changelog author="Malin Lorch &lt;mlorch@interworx.com&gt; - 2.4.53" date="1666094400">- Add CloudLinux suexec patch
- Add huge string length patch
- Add harden symlinks patch
- Manual rebase onto Centos9-stream 2.4.53 build</changelog>

</package>

</otherdata>