0 releases 122 tags

RSS feed

• imports/c10s/httpd-2.4.63-4.el10 c7abef52c5

  Compare

  Resolves: RHEL-99945 - httpd: HTTP Session Hijack via a TLS

  Ghost released this 2025-08-16 12:53:35 +00:00 | -710 commits to c8-stream-2.4 since this release

  upgrade (CVE-2025-49812)
  Resolves: RHEL-99962 - httpd: access control bypass by trusted clients
  is possible using TLS 1.3 session resumption (CVE-2025-23048)
  Resolves: RHEL-99970 - httpd: insufficient escaping of user-supplied
  data in mod_ssl (CVE-2024-47252)
  Resolves: RHEL-103489 - stickysession field does not work when
  specifying it in the query parameter after upgrade to 9.5

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads