RHSA-2020:3958: Moderate: httpd security, bug fix, and enhancement update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.Security Fix(es): httpd: Improper handling of headers in modsession can allow a remote user to modify session data for CGI applications (CVE-2018-1283) httpd: Out of bounds read in modcachesocache can allow a remote attacker to cause DoS (CVE-2018-1303) httpd: modrewrite configurations vulnerable to open redirect (CVE-2020-1927) httpd: <FilesMatch> bypass with a trailing newline in the file name (CVE-2017-15715) httpd: modrewrite potential open redirect (CVE-2019-10098) httpd: modproxyftp use of uninitialized value (CVE-2020-1934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.Additional Changes:For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.