mod_proxy_html-1:2.4.6-98.el7.centos.7>t  DH`pd-$ƨ E# xV .r I6S ~!V^J =g#Vw5Gi&'jҞGfMݲ ʫ[ȒU:7ktEՠEO^~_M3O-/y 00=XW3| $Jw qC^Dc0)| }(@D%3Y¸㡄VäF8ɂ zo0BiA-pO%@@/Ab?r'_Q:+[~lCY,XYu\?8r)]sa˷F$dm%?qf!bO$zgR+1Чw"cŻ7]6>Zl 0 ̔O2K:>M'hcxofiNdWzȗܵa^o .2MiDcC| Qo Y3dnjB;c<s\p&{g41f9fe3262ea47b9fc02ea19a0ab62a09e0400b9Ѽd-$ƨ5jQ'{SV8r(ԡODɍ0ɍo#TzY݂pF ʘ E2AGȪbϝo8÷k _0S3BP' 99-5/n<kNVfn,)%0gd4~[0bomz`䄙C@@CԠ 瀨,<Ftz\tv+( 7h.HKjJk4Li$CU 어5-ЊAw}\0*!څ@{šs 1qE:9-VbWp/ـ-iZ~8%/V-o[RJ(>($L-J\2~e-9/f0lR0u/P/6 $>6z?zd( , d /Jcip|    W \hw$(89,:*BxGxHyIyXyYy ZyP[yT\y`]yl^ybydzkezpfzslzuzCmod_proxy_html2.4.698.el7.centos.7HTML and XML content filters for the Apache HTTP ServerThe mod_proxy_html and mod_xml2enc modules provide filters which can transform and modify HTML and XML content.d-x86-01.bsys.centos.orgCentOSASL 2.0CentOS BuildSystem System Environment/Daemonshttp://httpd.apache.org/linuxx86_64p[ȁaed-d-a2211995b7e55b781f68666664f0bcd84550ed9a16edee07121f63477dfaaffab1b80507c6698ec584fe917f914b919da6f012fd3016c4f317f5d03ff57dfacd619bb964b79ac22007e76cfb308bac4e7faeb33f2cda1fedf9ddc9ac6ab94e8erootrootrootrootrootroothttpd-2.4.6-98.el7.centos.7.src.rpmmod_proxy_htmlmod_proxy_html(x86-64)   @@@@@@@@@@@ httpdhttpd-mmnrpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(CompressedFileNames)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libpthread.so.0()(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.5.2)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)rtld(GNU_HASH)rpmlib(PayloadIsXz)0:2.4.6-98.el7.centos.720120211x86644.6.0-14.0-13.0.4-15.2-14.11.3d-bd@c@b9@aaav@a^@_}^@^|@]z@]^]A\@\[+@[+@[+@[*A['[d@[d@ZZS]@Y@YeY@YY@YY@YdYp@Y{Y{Y*@YYw2Y@Y@Y@XXg@X,X,X@XƉX•@XCX@X@XXXXO@XO@XO@XO@XXWWW{@Wc@V͛@U@Uݪ@UoUȒ@UU@Un@UY@U.RT}Tto@TXTG@T2@T @TTS@SS@S@SuSǺS*@SSRUR@RRΏ@R@RkR1@RsRrF@Ri RM\@RC@Q@QQޞ@QQo@Q@QQ@Qo@Qm=@QQQ,Q,Q']QP @P6@P6@P{@PPl(PiPiPiPiPiPYPQPIP3x@P3x@PPO@OO@O@OЗOЗOF@OF@OF@O]@O"O"O@O@O@O@O@O@O@OOOOOOleOleO_6O_6O_6OU@O8@O8@O5OKO@ONNS@N{#@NoENdNBrN)f@N&@N@N MM>MMn1@MdMRMF@M(QM$]@M$]@M# L@L@LLMxL7@K@Johnny Hughes Luboš Uhliarik - 2.4.6-97.7Luboš Uhliarik - 2.4.6-97.6Luboš Uhliarik - 2.4.6-97.5Luboš Uhliarik - 2.4.6-97.4Luboš Uhliarik - 2.4.6-97.3Luboš Uhliarik - 2.4.6-97.2Luboš Uhliarik - 2.4.6-97.1Lubos Uhliarik - 2.4.6-97Lubos Uhliarik - 2.4.6-95Lubos Uhliarik - 2.4.6-94Lubos Uhliarik - 2.4.6-93Joe Orton - 2.4.6-92Lubos Uhliarik - 2.4.6-91Lubos Uhliarik - 2.4.6-90Joe Orton - 2.4.6-89Luboš Uhliarik - 2.4.6-88Luboš Uhliarik - 2.4.6-87Luboš Uhliarik - 2.4.6-86Luboš Uhliarik - 2.4.6-85Luboš Uhliarik - 2.4.6-84Luboš Uhliarik - 2.4.6-83Luboš Uhliarik - 2.4.6-82Joe Orton - 2.4.6-81Luboš Uhliarik - 2.4.6-80Luboš Uhliarik - 2.4.6-79Luboš Uhliarik - 2.4.6-78Luboš Uhliarik - 2.4.6-77Luboš Uhliarik - 2.4.6-76Luboš Uhliarik - 2.4.6-75Luboš Uhliarik - 2.4.6-74Luboš Uhliarik - 2.4.6-73Luboš Uhliarik - 2.4.6-72Luboš Uhliarik - 2.4.6-71Luboš Uhliarik - 2.4.6-70Luboš Uhliarik - 2.4.6-69Luboš Uhliarik - 2.4.6-68Luboš Uhliarik - 2.4.6-67Luboš Uhliarik - 2.4.6-66Luboš Uhliarik - 2.4.6-65Luboš Uhliarik - 2.4.6-64Luboš Uhliarik - 2.4.6-63Luboš Uhliarik - 2.4.6-62Luboš Uhliarik - 2.4.6-61Luboš Uhliarik - 2.4.6-60Luboš Uhliarik - 2.4.6-59Luboš Uhliarik - 2.4.6-58Luboš Uhliarik - 2.4.6-57Luboš Uhliarik - 2.4.6-56Luboš Uhliarik - 2.4.6-55Luboš Uhliarik - 2.4.6-54Luboš Uhliarik - 2.4.6-53Luboš Uhliarik - 2.4.6-52Luboš Uhliarik - 2.4.6-51Luboš Uhliarik - 2.4.6-50Luboš Uhliarik - 2.4.6-49Luboš Uhliarik - 2.4.6-48Joe Orton - 2.4.6-47Luboš Uhliarik - 2.4.6-46Luboš Uhliarik - 2.4.6-45Joe Orton - 2.4.6-44Joe Orton - 2.4.6-43Joe Orton - 2.4.6-42Jan Kaluza - 2.4.6-41Jan Kaluza - 2.4.6-40Jan Kaluza - 2.4.6-39Jan Kaluza - 2.4.6-38Jan Kaluza - 2.4.6-37Jan Kaluza - 2.4.6-36Jan Kaluza - 2.4.6-35Jan Kaluza - 2.4.6-34Jan Kaluza - 2.4.6-33Jan Kaluza - 2.4.6-32Jan Kaluza - 2.4.6-31Jan Kaluza - 2.4.6-30Jan Kaluza - 2.4.6-29Jan Kaluza - 2.4.6-28Jan Kaluza - 2.4.6-27Jan Kaluza - 2.4.6-26Jan Kaluza - 2.4.6-25Jan Kaluza - 2.4.6-24Jan Kaluza - 2.4.6-23Jan Kaluza - 2.4.6-22Jan Kaluza - 2.4.6-21Jan Kaluza - 2.4.6-20Jan Kaluza - 2.4.6-19Jan Kaluza - 2.4.6-18Jan Kaluza - 2.4.6-17Joe Orton - 2.4.6-16Joe Orton - 2.4.6-15Daniel Mach - 2.4.6-14Joe Orton - 2.4.6-13Joe Orton - 2.4.6-12Joe Orton - 2.4.6-11Joe Orton - 2.4.6-10Daniel Mach - 2.4.6-9Joe Orton - 2.4.6-8Jan Kaluza - 2.4.6-7Jan Kaluza - 2.4.6-6Jan Kaluza - 2.4.6-5Jan Kaluza - 2.4.6-4Jan Kaluza - 2.4.6-3Jan Kaluza - 2.4.6-2Joe Orton - 2.4.6-1Jan Kaluza - 2.4.4-12Joe Orton - 2.4.4-11Joe Orton - 2.4.4-10Joe Orton - 2.4.4-9Jan Kaluza - 2.4.4-8Jan Kaluza - 2.4.4-6Jan Kaluza - 2.4.4-5Jan Kaluza - 2.4.4-4Jan Kaluza - 2.4.4-3Joe Orton - 2.4.4-2Joe Orton - 2.4.4-1Joe Orton - 2.4.3-17Fedora Release Engineering - 2.4.3-16Joe Orton - 2.4.3-15Joe Orton - 2.4.3-14Joe Orton - 2.4.3-13Joe Orton - 2.4.3-12Joe Orton - 2.4.3-11Joe Orton - 2.4.3-10Joe Orton - 2.4.3-9.1Joe Orton - 2.4.3-9Joe Orton - 2.4.3-8Joe Orton - 2.4.3-7Jan Kaluza - 2.4.3-6Joe Orton - 2.4.3-5Joe Orton - 2.4.3-4Jan Kaluza - 2.4.3-3Joe Orton - 2.4.3-2Joe Orton - 2.4.3-1Joe Orton - 2.4.2-23Fedora Release Engineering - 2.4.2-22Joe Orton - 2.4.2-21Joe Orton - 2.4.2-20Joe Orton - 2.4.2-19Joe Orton - 2.4.2-18Joe Orton - 2.4.2-17Joe Orton - 2.4.2-16Joe Orton - 2.4.2-15Joe Orton - 2.4.2-14Joe Orton - 2.4.2-13Joe Orton - 2.4.2-12Joe Orton - 2.4.2-11Joe Orton - 2.4.2-10Joe Orton - 2.4.2-9Joe Orton - 2.4.2-8Joe Orton - 2.4.2-7Joe Orton - 2.4.2-6Joe Orton - 2.4.2-5Joe Orton - 2.4.2-4Joe Orton - 2.4.2-3.2Joe Orton - 2.4.2-3Joe Orton - 2.4.2-2Jan Kaluza - 2.4.2-1Joe Orton - 2.4.1-6Joe Orton - 2.4.1-5Joe Orton - 2.4.1-4Joe Orton - 2.4.1-3Joe Orton - 2.4.1-2Joe Orton - 2.4.1-1Joe Orton - 2.2.22-2Joe Orton - 2.2.22-1Petr Pisar - 2.2.21-8Jan Kaluza - 2.2.21-7Joe Orton - 2.2.21-6Fedora Release Engineering - 2.2.21-5Jan Kaluza - 2.2.21-4Jan Kaluza - 2.2.21-3Ville Skyttä - 2.2.21-2Joe Orton - 2.2.21-1Joe Orton - 2.2.20-1Jan Kaluza - 2.2.19-5Iain Arnell 1:2.2.19-4Jan Kaluza - 2.2.19-3Jan Kaluza - 2.2.19-2Joe Orton - 2.2.19-1Joe Orton - 2.2.17-13Joe Orton - 2.2.17-12Joe Orton - 2.2.17-11Joe Orton - 2.2.17-10Joe Orton - 2.2.17-9Fedora Release Engineering - 2.2.17-8Joe Orton - 2.2.17-7Joe Orton - 2.2.17-6Joe Orton - 2.2.17-5Joe Orton - 2.2.17-4Joe Orton - 2.2.17-3Joe Orton - 2.2.17-2Joe Orton - 2.2.17-1Joe Orton - 2.2.16-2Joe Orton - 2.2.16-1Joe Orton - 2.2.15-3Robert Scheck - 2.2.15-1- Manual CentOS Debranding- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes corrupt and mixed-up responses- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via malformed requests - Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in ap_escape_quotes() via malicious input - Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:"- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending a client cert to backend server - Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout - Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool concurrency issues- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized value- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing newline in the file name - Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect - Resolves: #1724879 - httpd terminates all SSL connections using an abortive shutdown - Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive - Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in mod_cache_socache can allow a remote attacker to cause a denial of service - Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in mod_session can allow a remote user to modify session data for CGI applications- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect expiry time- htpasswd: add SHA-2 crypt() support (#1486889)- Resolves: #1630886 - scriptlet can fail if hostname is not installed - Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in mod_authnz_ldap when using too small Accept-Language values - Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after failure in reading the HTTP request - Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch directive - Resolves: #1633152 - mod_session missing apr-util-openssl - Resolves: #1649470 - httpd response contains garbage in Content-Type header - Resolves: #1724034 - Unexpected OCSP in proxy SSL connection- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation in mod_auth_digest - Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control bypass due to race condition - Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency- fix per-request leak of bucket brigade structure (#1583218)- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple SIGUSR1- Resolves: #1458364 - RMM list corruption in ldap module results in server hang- Resolves: #1493181 - RFE: mod_ssl: allow sending multiple CA names which differ only in case- Resolves: #1556761 - mod_proxy_wstunned config needs the default port number- Resolves: #1548501 - Make OCSP more configurable (like CRL)- Resolves: #1523536 - Backport Apache BZ#59230 mod_proxy_express uses db after close- Resolves: #1533793 - Use Variable with mod_authnz_ldap- don't terminate connections during graceful stop/restart (#1557785)- Related: #1288395 - httpd segfault when logrotate invoked- Resolves: #1274890 - mod_ssl config: tighten defaults- Resolves: #1506392 - Backport: SSLSessionTickets directive support- Resolves: #1440590 - Need an option to disable UTF8-conversion of certificate DN- Resolves: #1464406 - Apache consumes too much memory for CGI output- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective when it's defined outside setting- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path- Resolves: #1288395 - httpd segfault when logrotate invoked- Resolves: #1368491 - mod_authz_dbd segfaults when AuthzDBDQuery missing- Resolves: #1467402 - rotatelogs: creation of zombie processes when -p is used- Resolves: #1493065 - CVE-2017-9798 httpd: Use-after-free by limiting unregistered HTTP method- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass - Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference - Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread - Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread - Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Related: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS- Resolves: #1442872 - apache user is not created during httpd installation when apache group already exist with GID other than 48- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp: patch to set worker secret passed to tomcat- Related: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1414258 - Crash during restart or at startup in mod_ssl, in certinfo_free() function registered by ssl_stapling_ex_init()- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines are broken during buffer resize- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves with mod_proxy_http and mod_proxy_ajp- Resolves: #1324416 - Error 404 when switching language in HTML manual more than once- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi spamming non-errors: AH01075: Error dispatching request to : (passing brigade to output filters)- Resolves: #1371876 - Apache httpd returns "200 OK" for a request exceeding LimitRequestBody when enabling mod_ext_filter- Resolves: #1372692 - Apache httpd does not log status code "413" in access_log when exceeding LimitRequestBody- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple successive graceful reloads- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny directives- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup on backconn- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed worker to be retried before the retry period is over- Resolves: #1389535 - Segmentation fault in SSL_renegotiate- Resolves: #1406184 - stapling_renew_response: abort early (before apr_uri_parse) if ocspuri is empty- prefork: fix delay completing graceful restart (#1327624) - mod_ldap: fix authz regression, failing to rebind (#1415257)- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various flaws- RFE: run mod_rewrite external mapping program as non-root (#1316900)- add security fix for CVE-2016-5387- add 451 (Unavailable For Legal Reasons) response status-code (#1343582)- mod_cache: treat cache as valid with changed Expires in 304 (#1331341)- mod_cache: merge r->err_headers_out into r->headers when the response is cached for the first time (#1264989) - mod_ssl: Do not send SSL warning when SNI hostname is not found as per RFC 6066 (#1298148) - mod_proxy_fcgi: Ignore body data from backend for 304 responses (#1263038) - fix apache user creation when apache group already exists (#1299889) - fix apache user creation when USERGROUPS_ENAB is set to 'no' (#1288757) - mod_proxy: fix slow response time for reponses with error status code when using ProxyErrorOverride (#1283653) - mod_ldap: Respect LDAPConnectionPoolTTL for authn connections (#1300149) - mod_ssl: use "localhost" in the dummy SSL cert for long FQDNs (#1240495) - rotatelogs: improve support for localtime (#1244545) - ab: fix read failure when targeting SSL server (#1255331) - mod_log_debug: fix LogMessage example in documentation (#1279465) - mod_authz_dbd, mod_authn_dbd, mod_session_dbd, mod_rewrite: Fix lifetime of DB lookup entries independently of the selected DB engine (#1287844) - mod_ssl: fix hardware crypto support with custom DH parms (#1291865) - mod_proxy_fcgi: fix SCRIPT_FILENAME when a balancer is used (#1302797)- mod_dav: follow up fix for previous commit (#1263975)- mod_dav: treat dav_resource uri as escaped (#1255480)- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)- core: fix chunk header parsing defect (CVE-2015-3183) - core: replace of ap_some_auth_required with ap_some_authn_required and ap_force_authn hook (CVE-2015-3185)- Revert fix for #1162152, it is not needed in RHEL7 - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)- mod_remoteip: correct the trusted proxy match test (#1179306) - mod_dav: send complete response when resource is created (#1235383) - apachectl: correct the apachectl status man page (#1231924)- mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328) - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820) - fix -D[efined] or [d] variables lifetime accross restarts (#1227219) - mod_ssl: do not send NPN extension with not configured (#1226015)- mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)- mod_authn_dbd: fix use-after-free bug with postgresql (#1188779) - mod_remoteip: correct the trusted proxy match test (#1179306) - mod_status: honor remote_ip as documented (#1169081) - mod_deflate: fix decompression of files larger than 4GB (#1170214) - core: improve error message for inaccessible DocumentRoot (#1170220) - ab: try all addresses instead of failing on first one when not available (#1125276) - mod_proxy_wstunnel: add support for SSL (#1180745) - mod_proxy_wstunnel: load this module by default (#1180745) - mod_rewrite: add support for WebSockets (#1180745) - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091) - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache are used and SSL session is resumed (#1170206) - mod_ssl: fix memory leak on httpd reloads (#1181690) - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476) - mod_cgi: return error code 408 on timeout (#1162152) - mod_dav_fs: set default value of DAVLockDB (#1176449) - add Documentation= to the httpd.service and htcacheclean.service (#1184118) - do not display "bomb" icon for files ending with "core" (#1170215) - add missing Reason-Phrase in HTTP response headers (#1162159) - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625) - apachectl: ignore HTTPD variable from sysconfig (#1214401) - apachectl: fix "graceful" documentation (#1214398) - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)- mod_proxy_fcgi: determine if FCGI_CONN_CLOSE should be enabled instead of hardcoding it (#1168050) - mod_proxy: support Unix Domain Sockets (#1168081)- core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581)- rebuild against proper version of OpenSSL (#1080125)- set vstring based on /etc/os-release (#1114123)- fix the dependency on openssl-libs to match the fix for #1080125- allow 'es to be seen under virtual hosts (#1131847)- do not use hardcoded curve for ECDHE suites (#1080125)- allow reverse-proxy to be set via SetHandler (#1136290)- fix possible crash in SIGINT handling (#1131006)- ab: fix integer overflow when printing stats with lot of requests (#1092420)- add pre_htaccess so mpm-itk can be build as separate module (#1059143)- mod_ssl: prefer larger keys and support up to 8192-bit keys (#1073078)- fix build on ppc64le by using configure macro (#1125545) - compile httpd with -O3 on ppc64le (#1123490) - mod_rewrite: expose CONN_REMOTE_ADDR (#1060536)- mod_cgid: add security fix for CVE-2014-0231 (#1120608) - mod_proxy: add security fix for CVE-2014-0117 (#1120608) - mod_deflate: add security fix for CVE-2014-0118 (#1120608) - mod_status: add security fix for CVE-2014-0226 (#1120608) - mod_cache: add secutiry fix for CVE-2013-4352 (#1120608)- mod_dav: add security fix for CVE-2013-6438 (#1077907) - mod_log_config: add security fix for CVE-2014-0098 (#1077907)- mod_ssl: improve DH temp key handling (#1057687)- mod_ssl: use 2048-bit RSA key with SHA-256 signature in dummy certificate (#1071276)- Mass rebuild 2014-01-24- mod_ssl: sanity-check use of "SSLCompression" (#1036666) - mod_proxy_http: fix brigade memory usage (#1040447)- rebuild- build with -O3 on ppc64 (#1051066)- mod_dav: fix locktoken handling (#1004046)- Mass rebuild 2013-12-27- use unambiguous httpd-mmn (#1029360)- mod_ssl: allow SSLEngine to override Listen-based default (#1023168)- systemd: Use {MAINPID} notation in service file (#969972)- systemd: send SIGWINCH signal without httpd -k in ExecStop (#969972)- expand macros in macros.httpd (#1011393)- fix "LDAPReferrals off" to really disable LDAP Referrals- revert fix for dumping vhosts twice- update to 2.4.6 - mod_ssl: use revised NPN API (r1487772)- mod_unique_id: replace use of hostname + pid with PRNG output (#976666) - apxs: mention -p option in manpage- add patch for aarch64 (Dennis Gilmore, #925558)- remove duplicate apxs man page from httpd-tools- remove zombie dbmmanage script- return 400 Bad Request on malformed Host header- htpasswd/htdbm: fix hash generation bug (#956344) - do not dump vhosts twice in httpd -S output (#928761) - mod_cache: fix potential crash caused by uninitialized variable (#954109)- execute systemctl reload as result of apachectl graceful - mod_ssl: ignore SNI hints unless required by config - mod_cache: forward-port CacheMaxExpire "hard" option - mod_ssl: fall back on another module's proxy hook if mod_ssl proxy is not configured.- fix service file to not send SIGTERM after ExecStop (#906321, #912288)- protect MIMEMagicFile with IfModule (#893949)- really package mod_auth_form in mod_session (#915438)- update to 2.4.4 - fix duplicate ownership of mod_session config (#914901)- add mod_session subpackage, move mod_auth_form there (#894500)- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild- add systemd service for htcacheclean- drop patch for r1344712- filter mod_*.so auto-provides (thanks to rcollet) - pull in syslog logging fix from upstream (r1344712)- rebuild to pick up new apr-util-ldap- rebuild- pull upstream patch r1392850 in addition to r1387633- restore "ServerTokens Full-Release" support (#811714)- define PLATFORM in os.h using vendor string- use systemd script unconditionally (#850149)- use systemd scriptlets if available (#850149) - don't run posttrans restart if /etc/sysconfig/httpd-disable-posttrans exists- use systemctl from apachectl (#842736)- fix some error log spam with graceful-stop (r1387633) - minor mod_systemd tweaks- use IncludeOptional for conf.d/*.conf inclusion- adding mod_systemd to integrate with systemd better- mod_ssl: add check for proxy keypair match (upstream r1374214)- update to 2.4.3 (#849883) - own the docroot (#848121)- add mod_proxy fixes from upstream (r1366693, r1365604)- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild- drop explicit version requirement on initscripts- mod_ext_filter: fix error_log warnings- support "configtest" and "graceful" as initscripts "legacy actions"- avoid use of "core" GIF for a "core" directory (#168776) - drop use of "syslog.target" in systemd unit file- use _unitdir for systemd unit file - use /run in unit file, ssl.conf- mod_ssl: fix NPN patch merge- move tmpfiles.d fragment into /usr/lib per new guidelines - package /run/httpd not /var/run/httpd - set runtimedir to /run/httpd likewise- fix htdbm/htpasswd crash on crypt() failure (#818684)- pull fix for NPN patch from upstream (r1345599)- update suexec patch to use LOG_AUTHPRIV facility- really fix autoindex.conf (thanks to remi@)- fix autoindex.conf to allow symlink to poweredby.png- suexec: use upstream version of patch for capability bit support- suexec: use syslog rather than suexec.log, drop dac_override capability- mod_ssl: add TLS NPN support (r1332643, #809599)- add BR on APR >= 1.4.0- use systemctl from logrotate (#221073)- pull from upstream: * use TLS close_notify alert for dummy_connection (r1326980+) * cleanup symbol exports (r1327036+)- rebuild- really fix restart- tweak default ssl.conf - fix restart handling (#814645) - use graceful restart by default- update to 2.4.2- fix macros- add _httpd_moddir to macros- fix symlink for poweredby.png - fix manual.conf- add mod_proxy_html subpackage (w/mod_proxy_html + mod_xml2enc) - move mod_ldap, mod_authnz_ldap to mod_ldap subpackage- clean docroot better - ship proxy, ssl directories within /var/cache/httpd - default config: * unrestricted access to (only) /var/www * remove (commented) Mutex, MaxRanges, ScriptSock * split autoindex config to conf.d/autoindex.conf - ship additional example configs in docdir- update to 2.4.1 - adopt upstream default httpd.conf (almost verbatim) - split all LoadModules to conf.modules.d/*.conf - include conf.d/*.conf at end of httpd.conf - trim %changelog- fix build against PCRE 8.30- update to 2.2.22- Rebuild against PCRE 8.30- fix #783629 - start httpd after named- complete conversion to systemd, drop init script (#770311) - fix comments in /etc/sysconfig/httpd (#771024) - enable PrivateTmp in service file (#781440) - set LANG=C in /etc/sysconfig/httpd- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild- fix #751591 - start httpd after remote-fs- allow change state of BalancerMember in mod_proxy_balancer web interface- Make mmn available as %{_httpd_mmn}. - Add .svgz to AddEncoding x-gzip example in httpd.conf.- update to 2.2.21- update to 2.2.20 - fix MPM stub man page generation- fix #707917 - add httpd-ssl-pass-dialog to ask for SSL password using systemd- rebuild while rpm-4.9.1 is untagged to remove trailing slash in provided directory names- fix #716621 - suexec now works without setuid bit- fix #689091 - backported patch from 2.3 branch to support IPv6 in logresolve- update to 2.2.19 - enable dbd, authn_dbd in default config- fix path expansion in service files- add systemd service files (#684175, thanks to Jóhann B. Guðmundsson)- minor updates to httpd.conf - drop old patches- rebuild- use arch-specific mmn- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild- generate dummy mod_ssl cert with CA:FALSE constraint (#667841) - add man page stubs for httpd.event, httpd.worker - drop distcache support - add STOP_TIMEOUT support to init script- update default SSLCipherSuite per upstream trunk- fix requires (#667397)- de-ghost /var/run/httpd- add tmpfiles.d configuration, ghost /var/run/httpd (#656600)- drop setuid bit, use capabilities for suexec binary- update to 2.2.17- link everything using -z relro and -z now- update to 2.2.16- default config tweaks: * harden httpd.conf w.r.t. .htaccess restriction (#591293) * load mod_substitute, mod_version by default * drop proxy_ajp.conf, load mod_proxy_ajp in httpd.conf * add commented list of shipped-but-unloaded modules * bump up worker defaults a little * drop KeepAliveTimeout to 5 secs per upstream - fix LSB compliance in init script (#522074) - bundle NOTICE in -tools - use init script in logrotate postrotate to pick up PIDFILE - drop some old Obsoletes/Conflicts- update to 2.2.15 (#572404, #579311)mod_proxy_html1:2.4.6-98.el7.centos.71:2.4.6-98.el7.centos.71:2.4.1-200-proxyhtml.confmod_proxy_html.somod_xml2enc.so/etc/httpd/conf.modules.d//usr/lib64/httpd/modules/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnu?7zXZ !#,#SO] b2u Q{LR|E#  2t_[!P TN0Є݈hRO0lÒ`LXo-y^^.57ӸԲ |3A94`<0:HT$P\ ~M) D:dKZmSl5; V]ѥruhu6ϖ5![Q=ծ*opNL*[ WL:Ҍ%[k9bmGÃ6.㶇GT,VGh^OOxf@h^ pb"i NTxfMmK9%o >MdH[|@P?#_^¿u>DniqRKFb2Ix!L ofi>%5b(8A =Qqy)\r@RЅ+fryEƠdw8m6*ѳdA,_RDWCcҲsYKxB%HFnfF?R\f?n^C -y1{: ?iirwWܪF1yn<ֻ(w^(7)? q4 tp}d!I #)Fd3p%2K!&R`D@veQNt +sBZ`!\~"X$[ZBHG!*K'PRˁ_>MlވtAu/G<1g5j0^|/O$$DpQ>eXVN8#̧TFv(q+۟ k=""]J4쏒$P@!lLὴNg%Aq.-51|E;ZS*u#:~躢:L3/;}q{l,לWƒ)^eĒ7Sb'd|\GȰ+ OXV%^NK3ޤ=C^6$ -M>ɻsi0c6 ,lrmTo0kZqdoYoEULjx\ 4!˴̟Ltw hȿ5|cbهc:@+00ڪ(B2oȴ8${laa{ a*y,Y:䑺& +n")5V-|> ʽ`ov(6둼FW!9E *TT33М%&np/h"k\zk]=v4xKU)]/.m`C姓\*$(tzE‚m ze"g1am0$ Đ;pf zNKHxGIBK(F! u|ܿƛ#4Уԣj Cֱ֤Qu(jNA:= Z.9c$*M5}cu4J::6-F/gE VP 6]MZE`fЄH.M}l (ǖp8Sߍd7,sx v> XprC~i1WlFgT0&#rbZg DEY&eNV%΄+/| ~qLވgI!`gY =0ߑVUz~35\X rfPѲ ``u\GN\CMF=q.V|,jfej¸E{F6 M'iԎS_eLWgKN$ pˎCide !mZt:D1Ϭ4(ݜO[#Ɏq׾ /?6C X#eł\H\ }`Ès.h"+ͷKe1uތ2sވߒ3T+2`kBC1y lp0GGWc 66+ \'aR%B[>L>Еy)N0 W.%T@@}%0~CiVf䁼E\=R]Kpp+˕$ T.Nr}9-[RRz⛜4! U,YpH (eG7=Ukt"gT%ovA3eX4>/{-Orma.ryDթsa0'/?)yR7py-! phT[32SN)o+`ץ3AYo#ZPY#U\O[]$d&=V:oyKUgEOȸOwxPg;EM\7/Ъtӭ/ş 7>q߅`Fy *P >]+i5h«VFޯRPy~ {{[z6]yv̀L2kX2?io&P腖ј+<bauAZb"(f"ۘJfr 1>Q٤q/"vYzVIK^-7;3+:7S!p-K ֥<{SRgMLKocOJ2cEvIdnW̮۱%t|*ibbe i*zaaY6Gڽ,%B'e@}q ?Lf[B ; JFPO/9kPR%VO㿒8 &6^T%a٩b^dFLI1V=hODsX[(+8`viF&yH1: F.fkB8PHϣUطXX 7 AA]Otq@72AucByǾ޿4^z&:A娓xlÛntdjѾ]r8(Y;BoƐjQ=MKfDHh@ 1e|1z7fЌHtoahId[҅k"@c_l 4L |ltف fscy;aƛN>=Sm݄Ҟ1晆@# pY p,vg: BxKb'w!quxnT޴P5oN4oB(f`MVBmSv 6Met. n6E[j [ѣ5! v6HƧ)7]T1j0&bPܐʏJћqc],/)avW?6!T/InAO-ԱHxIŇL[@X|z9)P`{Mlh].|e%"2j=5@h&BseٓIn0arg0{xR+2Dtc~[SL$mRAN;])wpWXM7$yW}j.wj&XY~ KA9LF)' 5܈FXe-LA^& yah߸)BeA-vc>ϵCm,HŎPbŐcOW=?]{m?W!n_L=g t$ʐ?nȟW75z5=AWd`NLsL!R}/>yjD7xlgv~hN@!ghYa& 2_'&P U*-ʦ 23 +jZvlw  $Ib}2 YW!ip]BscJy:$)8.7pNc4cޛ*tN7Xi\> 1 $ iU 2_Ƀ,j9Z>6fq\X%CFG.X6(tG#VP@6+_oQr'HD E-8UazK̛fcS1OIY{I%h)[=t% "/7@Wchkv~YYdyitA%yl!E9k5 QSCzJPS6.1šZ.Q' C/:͗Xsp4OV|Dŋ8J4W{Z_e퐛:S^ǭpysSW?p@յov0| x"n'Hrl,4xTnV80r $b %M>qp ˇuj@/t=I$JVg$֡ybΝP2٦v(\AhEJҿ"XXޡ0pHA v&Ш ) w?l6,S2D b<((73 ܰ}k]RQq!u]SM ꎓ?Qm"7aӓi60s-}b΄~тUJ}m@\򠫱:騿82 ʪIQ -~dݓ 8ŠR"w:$.Mo&9Dc.vo6 tpZVGl#l]ri sb+TAJK 1p(KСl)(k}J&ZV#pd Vk<_-tVڡSYA毅{=m_;l;Mi|B|dwʈ=.ޭeBV2 ,,-Vp5lpr-m 'OqщU.ԕ4X Q]|5ۿD@X"?_WfaT&zC# F[U8S@df u̶d!l,Dğ$m`Uf1l9O la3oxaKF;A~i x"{p7hWjS4%kW=NPU"}~4uՅW @R8dJqiKHhycn_cLܼ^U?HY-# R&y+{H&(>[NJZۥSBڑLRH J8{ҫ:e*:,|r"9{|(#"^ٟ,WAN4j*+sv,O7]ӛH*>%ɨ[G8jUwOvIp'Ij"$tT#i@`̓, ; X0^4@q9 z !0^?#%rNOH=e=֑JPī"`'tibrZj)V;%f& QMQ}W=޻Pf}Ofy6jM><"%I(GpmkѨr9Fg`EDc\+@.R$c˖B&Fw}f(nfTI4Ll6V.m7l ۤ{(sL5 9ӋӫS7I%Ѧz!}ݗ1 $&G%y0;[hͅ\RܮvPݟ_mi}^q bY%QfFȧ>xI i']@y3=RZJ^\:X<81(_[sRCO2jϼ,`5a bڱ@, bU&H }m@A^Y@iV7^:x4a5M"Oʣ qs(+Cぽ3n:OTC,|߷VS_w%z; uw%sa?@'K| ¹_*`ؤdMA*%^k*kU+GPӀ/:E*Lۋ1M(w4#9a%.T~}!"WA>tiOHݗ0fgve$&U$~mA%=4~aQ!Rč,^D\ {GRVN 8|yF&ؓDUV^/^m~\xZc}'ߏ $"¹!`[ !_T&{'C\0wE,M.(U Ô&']ּdot*[fW Խ0L/s~fy \Bu@b5)GKBjp1a~.~R@ryL`Dum:ַ& >!|HZs3,VYv8) Rg3[%AǷMOM@2PwYe7; D~G~jx̹ՖxҧO ՘J.N2䜅8;%#~($fz8ч)N@Cz'N)L=_EaLW_ki; 1(R!fǀW]Jg.{kH83D4; »w\}, avo~q㻪 覮MZvB0 = Tf.Gk`,Wz)>7,hU{w] Mn,v!Y8=/n&ݱ$S:&9 cp~ H$L$!S?d/up$10evϙ֣gp;;\Pa,ߨh/ H^hByx%fJ3NlҗӇK?,'{kJ/nֱ磞/)`7!dB5IP>#3h![+OBN 4W;SG0#"LOU*oaIT.GVV: g8Hk0EsY2Y N M?JO-rnu•äl(ҟ9 DaR,7JEO yj kaֹ1_@-H[,(G&W3uC7JyҒdao'Ohƻy??80 zYG sw!ҥ .3p"9bQDPC8ͼjOWH>t98qwEYa~>j# FCIW{ N2΃hrf)1`d)Kj GT}pccHFhjOelmP5v59> W/p$bwy u_sV;O^X^fPtv rczb\a6̼ս/pK1(35+Byΐ 7bQ8x%%UL@8˥XQ^Ȏ=:K]}sF8vrY+a^uNsC6( #Ae?mGq*?8 * :!YՃe<#>oSb.WUof5x3v2`# ^~,^+$~E9) U H7-R4o+uLU+8*d?ժ3]A1_]% crmS>`PF-wS"xS0e&' oWi ?X*Ikt4$( 7C YM?ݜׁl{v Npl*zb .|yQwg^]Fdžxn^@ N PCMtU%C=cÑV O7I.\]ճ?H(w Q̩hc-]9Zntγ@j9L S H)sF$>ɓGܖay-^EJ˝iH=2Pt#.9$0ix*XF էb2%I݄W0G^M!<]ZjW =㐏pfw(@({MDŹHVq¤T gZ}aO'svу>Ux&KϘzr緩I-*ػ褟@vVi*J(|¢qYBݛ.1W⫿n]Ap,~"OD3*?,VlSݿςOi Y.oiNlNɉd:L1p Pšm\EI. ͽ/80Q|:ICB.FL^y(CrA>p0vDCDJ9G9 qSOq$05=@=^9|f, ]y`#ge/mj~mDu{y26f=')WkU5=ZvSm vtbe?}|kb\T.b%Q哪 RIm$gDf̓!,vƞ̰q`j~^4A]/kĤ @l'H[]5zA۹_(Ě׻'L'g<Ρ=mE Ǥ:7'L$R42 b ltwvh2^e'I|=`9yQlk`Wn}yWS'y}t4ZS-@2S0DSiBŕ_9c5g\Zoq?_cyz!hHEm3 ` r |16xc#iO;:RV}ӫ=!',;oҺBFd0'#J/ww^ތ}нD3ԲQZ'9J1CH/]22QIR>~ \R3mElQR]c:筬i.Oʞ,YI|t~ݕ*3@N@NJPy1.e״XZs"-b̃s, :-OfH'.:v^d A/.X,4S+7[ ЏCmfl7q|*[aPP_G&H5\^dEZϭgA/%“*}I?芠YͼtQn(zgij]X3*,=bR4pzR+k:=U/+Dj_\&PZrI%.7{z^uG:%z(}N%)#@Y HLk"*|N\nը+>FMɧ}Qxd(W¢%-!TВ ';[l8ٜum5\` Ni giyJpkQlz <.F e$8aCIANV((7t)~ə1 0wB]`WXZps 4QFHFԘR)@?0}.v9RTJ54jEUй7bu~m HKd=5FT/DYq6w| Z9-4+c4d@4Ce yX.52еhXzI2K~}jB"?PߌF<c87}ܫחD6LJ]5 47(ƅEad!Uͦ}~'k/>M%3я c7BWN'rQ^*pOn*nZ`$@5IbhKcVb^FM(d o $¨1)0k.VsM :Bufي D_I Æ&ò Lta  YzH`•AoQ{Ud ʲEkl$!wk{CW.dbts#c!o+'~Vd!ׄf]ʛGQZ/4xw .DHQ^j!-anPXT* K K黤r;V2Qd&{ sU#A9#Dtz\ RG$[u) H>ո"SQ< gq&FgxJnۛEN{+k<~vL ZE~pҗB'X']`"6GHV{(´`+ӓ[jRgrLg8d W-B*7y=Wh.4޻W 1 ]_~]2 N1:h<*yX4=&jг4VKt;ǙkSqi13fn[ÿ wxc3V5m\G`u6r hy]_]d?]+ZvQz=P;}s&O p/`"S:@SyTtG ¯_F4kD63oT,R A Hˁ]Sw/ph)}z,'{qf X<Ԯ^\"h$JSݭEoM|)% 7=.@߁* m}c!On.WDr+ltc]ϊ(BI)0# .#iz*+4SfNiSo('& ~yoqA f=pz` 抡VU3bT`pFj!:b ϥMSUYhR]|-X9f)~3[XVnyNZ:zr~7r=?"(vfb ýd?YM!O 8Av iRdM$bX{ vG6Ŋ%챗kc )@,ed_Kb &s ަ0t fX4 >ljW򦑿{sd-b}TlN0%l>lף3{ $_q R`ʥk 1:A]ḨA>ѝ ȗLW Ȝy5񎐌lV'سr}ZluFn'\tnCIh# y݂~iu߻:զH LI$bb]YăŨIhKpmM!cj"o_CJDCw)0֣zgd4VIy)A, ?V<Adec x)e H"J qGW%gsn%D6әvNO$.)@ Q^~p{̜[ DO˾ó֎:>{0 )"Z⹑BziSnL3.xԞKd- p-!@M )T4zh;_l"F;`kv0' g^xHP"RJbv~4h /Q®C,TZ-EknXHrݴ 6U^qQ­q3Mݦx,SS }{_@|Gcs#&PiBb߅&H V8cJF"}frPc }͋KPRb D85eP^G8xTݙ|P{ŋӈY; L& ;]G%a\H11E::$5{o9Ƴ^%rANWLVs>MltKz\wDaj%7(8zHJ23+4>-yAC^g٣-I!X{6Hݰn6-qIĥe8 Dõ>Aof?Q}yaICR`aSCō/OU_ˡ^w &$ Jះ+ӡ=9ssp!|K-sDު}IiLȾzP7=$Pq M@t`P YF#ѸRG#޼6C͢v$[ZcWn, j$UUL8<~UrH]Wg5*kDmPh֢2/$,hgZ2ݧt~Wȉ/+ƃǕT5!1~VϚ&)7AwuI;ݡt3F{X>s yHTʀMٚDЀJd]ԣseeʝ@N^_򖱨-[$$տ`pu&Noo*܏.fw #?b]!; \UށvG SqՆ&ROWATDhfu &p>pt)x~Av.ϭ.pGFCxM 1fȐtO =OӱЯVdv~R2n$\;tE; cP]2Yp@_'qj+0 cl Y,\3HGZˍu7y@0]"M HT1K(W"Kc]CZ]tӮ. ɓh]y\M+YeolP*" Sͥ625m&߸&ٮ0)1y?T Uf>JJMHއ6nm 7ׅCXog)M½@ S50?=h{eGXl7ƂX+,o| Vy\<'ΠP0$*wNu*.S H.%cH HH)Yݢp'w._^7*4 k *>t3rU35q1@`z:r#lV)L4fx6nI|lTsɛ>1O29XN!4C:,\`E(9Y^!@hN9d_&X+>gaEY"H|G[#k&[/XrN ;MPб YZ