Slackware: 2019-022-01 Moderate: Httpd Security Fixes and Updates

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/httpd-2.4.38-i586-1_slack14.2.txz: Upgraded. This release contains security fixes and improvements. mod_session: mod_session_cookie does not respect expiry time allowing sessions to be reused. [Hank Ibell] mod_http2: fixes a DoS attack vector. By sending slow request bodies to resources not consuming them, httpd cleanup code occupies a server thread unnecessarily. This was changed to an immediate stream reset which discards all stream state and incoming data. [Stefan Eissing] mod_ssl: Fix infinite loop triggered by a client-initiated renegotiation in TLSv1.2 (or earlier) with OpenSSL 1.1.1 and later. PR 63052. [Joe Orton] For more information, see: https://www.cve.org/CVERecord?id=CVE-2018-17199 https://www.cve.org/CVERecord?id=CVE-2018-17189 https://www.cve.org/CVERecord?id=CVE-2019-0190 (* Security fix *)