shadowdaoandClaude Sonnet 5.5 541c565947 Remove mod_http2/mod_md from Apache images, add build gate (CVE-2026-119618) ...

mod_http2 (httpd 2.4.55-2.4.70) assign_headers() heap corruption -> RCE;
AlmaLinux has no fixed httpd yet. Nothing in WHP uses HTTP/2 inside a
container (HAProxy edge terminates h2/h3 and speaks HTTP/1.1 to backends),
so uninstall mod_http2 (and mod_md if ever present) from cac, cac-fpm and
shared-httpd. scripts/httpd-h2-md-gate.sh fails the build if http2_module,
proxy_http2_module or md_module is loadable or `httpd -t` fails, writes
/etc/whp-httpd-version and the images get LABEL org.whp.httpd-h2-md=removed.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0185ukXjXyosSkunDsdWz3mb

2026-11-12 05:58:57 -08:00

..

scripts

ci: pin base images by digest resolved directly from Docker Hub

2026-10-22 06:58:16 -07:00

workflows

Remove mod_http2/mod_md from Apache images, add build gate (CVE-2026-119618)

2026-11-12 05:58:57 -08:00