Don't know or some of this problem is in packages DA possible.

So i post it

https://access.redhat.com/security/cve/CVE-2017-9788

Looks like it was fixed in Apache 2.4.27