| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: httpd-devel | Distribution: AlmaLinux |
| Version: 2.4.63 | Vendor: AlmaLinux |
| Release: 4.el10_1.3 | Build date: Mon Dec 22 20:12:25 2025 |
| Group: Unspecified | Build host: s390x-builder02.almalinux.org |
| Size: 938674 | Source RPM: httpd-2.4.63-4.el10_1.3.src.rpm |
| Packager: AlmaLinux Packaging Team <packager@almalinux.org> | |
| Url: https://httpd.apache.org/ | |
| Summary: Development interfaces for the Apache HTTP Server | |
The httpd-devel package contains the APXS binary and other files that you need to build Dynamic Shared Objects (DSOs) for the Apache HTTP Server. If you are installing the Apache HTTP Server and you want to be able to compile or develop additional modules for Apache, you need to install this package.
Apache-2.0 AND (BSD-3-Clause AND metamail AND HPND-sell-variant AND Spencer-94)
* Wed Dec 10 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4.3
- Resolves: RHEL-135052 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
via AllowOverride FileInfo (CVE-2025-66200)
- Resolves: RHEL-135035 - httpd: Apache HTTP Server: CGI environment variable
override (CVE-2025-65082)
- Resolves: RHEL-134467 - httpd: Apache HTTP Server: Server Side Includes adds
query string to #exec cmd=... (CVE-2025-58098)
* Thu Nov 06 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4.2
- Resolves: RHEL-125894 - mod_ssl: allow more fine grained SSL SNI vhost check
to avoid unnecessary 421 errors after CVE-2025-23048 fix
* Sat Aug 16 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-4
- Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS
upgrade (CVE-2025-49812)
- Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
is possible using TLS 1.3 session resumption (CVE-2025-23048)
- Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
data in mod_ssl (CVE-2024-47252)
- Resolves: RHEL-103489 - stickysession field does not work when
specifying it in the query parameter after upgrade to 9.5
* Mon Jul 28 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-3
- Resolves: RHEL-106043 - httpd 2.4.62: mod_proxy_connect prematurely closes
connections
* Thu Jul 24 2025 Joe Orton <jorton@redhat.com> - 2.4.63-2
- mod_dav: add dav_get_base_path() API
Resolves: RHEL-105255
* Mon Jan 27 2025 Luboš Uhliarik <luhliari@redhat.com> - 2.4.63-1
- new version 2.4.63
- Resolves: RHEL-76358 - httpd rebase to 2.4.63
- Resolves: RHEL-73414 - RewriteRule proxying to UDS (unix domain socket)
configured in .htaccess doesn't work on httpd-2.4.62-1
- Resolves: RHEL-66489 - Apache HTTPD no longer parse PHP files with unicode
characters in the name
* Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 2.4.62-5
- Bump release for October 2024 mass rebuild:
Resolves: RHEL-64018
* Mon Aug 12 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
- Resolves: RHEL-50031 - httpd default config changes
* Thu Aug 08 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
- Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
- Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
httpd mod_proxy_wstunnel
* Sat Aug 03 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-2
- Resolves: RHEL-52722 - Regression introduced by CVE-2024-38474 fix
* Fri Jul 19 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-1
- new version 2.4.62
- Resolves: RHEL-33446
* Wed Jul 03 2024 Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
- new version 2.4.61
- Resolves: RHEL-45753 - httpd: Potential SSRF in
mod_rewrite (CVE-2024-39573)
- Resolves: RHEL-45757 - httpd: null pointer dereference in
mod_proxy (CVE-2024-38477)
- Resolves: RHEL-45776 - httpd: Improper escaping of output in
mod_rewrite (CVE-2024-38475)
- Resolves: RHEL-45791 - httpd: Encoding problem in
mod_proxy (CVE-2024-38473)
- Resolves: RHEL-45811 - httpd: Substitution encoding issue in
mod_rewrite (CVE-2024-38474)
- Resolves: RHEL-46051 - httpd: Security issues via backend applications
whose response headers are malicious or exploitable (CVE-2024-38476)
* Mon Jun 24 2024 Troy Dawson <tdawson@redhat.com> - 2.4.59-4.4
- Bump release for June 2024 mass rebuild
* Thu May 23 2024 Joe Orton <jorton@redhat.com> - 2.4.59-3.4
- mod_ssl: disable ENGINE support
Resolves: RHEL-33734
* Fri May 17 2024 Joe Orton <jorton@redhat.com> - 2.4.59-3.2
- mod_ssl: use SSL_OP_NO_RENEGOTIATION
* Fri May 03 2024 Joe Orton <jorton@redhat.com> - 2.4.59-3.1
- apachectl(8): use BUG_REPORT_URL from /etc/os-release
- apachectl(8): fix grammar (#2278748)
- httpd.service.xml(8): mention ProtectSystem= setting
* Wed May 01 2024 Joe Orton <jorton@redhat.com> - 2.4.59-3
- add ServerTokens: Full-Release support
* Mon Apr 15 2024 Joe Orton <jorton@redhat.com> - 2.4.59-2
- mod_ssl: add DH param handling fix (r1916863)
* Fri Apr 05 2024 Joe Orton <jorton@redhat.com> - 2.4.59-1
- update to 2.4.59
* Thu Mar 28 2024 Joe Orton <jorton@redhat.com> - 2.4.58-8
- rebuild to fix changelog ordering
* Thu Mar 07 2024 Rahul Sundaram <sundaram@fedoraproject.org> - 2.4.58-7
- Update Systemd security settings as part of https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening
- updated httpd.service(5) (Joe Orton)
* Wed Jan 24 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.58-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sat Jan 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.4.58-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 05 2024 Joe Orton <jorton@redhat.com> - 2.4.58-4
- fix OpenSSL 3.0 deprecation warnings (r1913912, r1915067)
- mod_ssl: move to provider API for pkcs11 support (#2253014)
/usr/bin/apxs /usr/include/httpd /usr/include/httpd/.mmn /usr/include/httpd/ap_compat.h /usr/include/httpd/ap_config.h /usr/include/httpd/ap_config_auto.h /usr/include/httpd/ap_config_layout.h /usr/include/httpd/ap_expr.h /usr/include/httpd/ap_hooks.h /usr/include/httpd/ap_listen.h /usr/include/httpd/ap_mmn.h /usr/include/httpd/ap_mpm.h /usr/include/httpd/ap_provider.h /usr/include/httpd/ap_regex.h /usr/include/httpd/ap_regkey.h /usr/include/httpd/ap_release.h /usr/include/httpd/ap_slotmem.h /usr/include/httpd/ap_socache.h /usr/include/httpd/apache_noprobes.h /usr/include/httpd/cache_common.h /usr/include/httpd/heartbeat.h /usr/include/httpd/http_config.h /usr/include/httpd/http_connection.h /usr/include/httpd/http_core.h /usr/include/httpd/http_log.h /usr/include/httpd/http_main.h /usr/include/httpd/http_protocol.h /usr/include/httpd/http_request.h /usr/include/httpd/http_ssl.h /usr/include/httpd/http_vhost.h /usr/include/httpd/httpd.h /usr/include/httpd/mod_auth.h /usr/include/httpd/mod_cache.h /usr/include/httpd/mod_cgi.h /usr/include/httpd/mod_core.h /usr/include/httpd/mod_dav.h /usr/include/httpd/mod_dbd.h /usr/include/httpd/mod_http2.h /usr/include/httpd/mod_include.h /usr/include/httpd/mod_log_config.h /usr/include/httpd/mod_proxy.h /usr/include/httpd/mod_request.h /usr/include/httpd/mod_rewrite.h /usr/include/httpd/mod_session.h /usr/include/httpd/mod_so.h /usr/include/httpd/mod_ssl.h /usr/include/httpd/mod_ssl_openssl.h /usr/include/httpd/mod_status.h /usr/include/httpd/mod_unixd.h /usr/include/httpd/mod_watchdog.h /usr/include/httpd/mod_xml2enc.h /usr/include/httpd/mpm_common.h /usr/include/httpd/os.h /usr/include/httpd/scoreboard.h /usr/include/httpd/unixd.h /usr/include/httpd/util_cfgtree.h /usr/include/httpd/util_charset.h /usr/include/httpd/util_cookies.h /usr/include/httpd/util_ebcdic.h /usr/include/httpd/util_fcgi.h /usr/include/httpd/util_filter.h /usr/include/httpd/util_ldap.h /usr/include/httpd/util_md5.h /usr/include/httpd/util_mutex.h /usr/include/httpd/util_script.h /usr/include/httpd/util_time.h /usr/include/httpd/util_varbuf.h /usr/include/httpd/util_xml.h /usr/lib/rpm/macros.d/macros.httpd /usr/lib64/httpd/build /usr/lib64/httpd/build/config_vars.mk /usr/lib64/httpd/build/instdso.sh /usr/lib64/httpd/build/library.mk /usr/lib64/httpd/build/ltlib.mk /usr/lib64/httpd/build/mkdir.sh /usr/lib64/httpd/build/program.mk /usr/lib64/httpd/build/rules.mk /usr/lib64/httpd/build/special.mk /usr/lib64/httpd/build/vendor-apxs /usr/lib64/httpd/build/vendor_config_vars.mk /usr/share/man/man1/apxs.1.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Dec 24 07:56:09 2025