-
Mon Jul 18 2016 EL Errata <el-errata_ww@oracle.com> - 2.4.6-40.0.1.4
- replace index.html with Oracle's index page oracle_index.html
-
Tue Jul 12 2016 Joe Orton <jorton@redhat.com> - 2.4.6-40.4
- add security fix for CVE-2016-5387
-
Thu Jul 07 2016 Joe Orton <jorton@redhat.com> - 2.4.6-40.3
- add 451 (Unavailable For Legal Reasons) response status-code (#1353269)
-
Fri Jun 17 2016 Joe Orton <jorton@redhat.com> - 2.4.6-40.2
- mod_cache: treat cache as valid with changed Expires in 304 (#1347648)
-
Mon Mar 21 2016 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40.1
- fix apache user creation when apache group already exists (#1319001)
-
Thu Sep 17 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40
- mod_dav: follow up fix for previous commit (#1263975)
-
Wed Aug 26 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39
- mod_dav: treat dav_resource uri as escaped (#1255480)
-
Wed Aug 19 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38
- mod_ssl: add support for User Principal Name in SSLUserName (#1242503)
-
Mon Aug 10 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37
- core: fix chunk header parsing defect (CVE-2015-3183)
- core: replace of ap_some_auth_required with ap_some_authn_required
and ap_force_authn hook (CVE-2015-3185)
-
Tue Jul 14 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36
- Revert fix for #1162152, it is not needed in RHEL7
- mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)