[ol7_optional_archive] mod_session-2.4.6-40.0.1.el7.x86_64

The mod_session module and associated backends provide an abstract
interface for storing and accessing per-user session data.

Changelog (Show File list) (Show related packages)

• Fri Nov 20 2015 EL Errata <el-errata_ww@oracle.com> - 2.4.6-40.0.1

  - replace index.html with Oracle's index page oracle_index.html

• Thu Sep 17 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-40

  - mod_dav: follow up fix for previous commit (#1263975)

• Wed Aug 26 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-39

  - mod_dav: treat dav_resource uri as escaped (#1255480)

• Wed Aug 19 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-38

  - mod_ssl: add support for User Principal Name in SSLUserName  (#1242503)

• Mon Aug 10 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-37

  - core: fix chunk header parsing defect (CVE-2015-3183)
  - core: replace of ap_some_auth_required with ap_some_authn_required
    and ap_force_authn hook (CVE-2015-3185)

• Tue Jul 14 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-36

  - Revert fix for #1162152, it is not needed in RHEL7
  - mod_proxy_ajp: fix settings ProxyPass parameters for AJP backends (#1242416)

• Wed Jul 01 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-35

  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_dav: send complete response when resource is created (#1235383)
  - apachectl: correct the apachectl status man page (#1231924)

• Wed Jun 03 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-34

  - mod_proxy_fcgi: honor Timeout / ProxyTimeout (#1222328)
  - do not show all vhosts twice in httpd -D DUMP_VHOSTS output (#1225820)
  - fix -D[efined] or <Define>[d] variables lifetime accross restarts (#1227219)
  - mod_ssl: do not send NPN extension with not configured (#1226015)

• Mon May 18 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-33

  - mod_authz_dbm: fix crash when using "Require dbm-file-group" (#1221575)

• Wed Apr 15 2015 Jan Kaluza <jkaluza@redhat.com> - 2.4.6-32

  - mod_authn_dbd: fix use-after-free bug with postgresql (#1188779)
  - mod_remoteip: correct the trusted proxy match test (#1179306)
  - mod_status: honor remote_ip as documented (#1169081)
  - mod_deflate: fix decompression of files larger than 4GB (#1170214)
  - core: improve error message for inaccessible DocumentRoot (#1170220)
  - ab: try all addresses instead of failing on first one when not available (#1125276)
  - mod_proxy_wstunnel: add support for SSL (#1180745)
  - mod_proxy_wstunnel: load this module by default (#1180745)
  - mod_rewrite: add support for WebSockets (#1180745)
  - mod_rewrite: do not search for directory if a URL will be rewritten (#1210091)
  - mod_ssl: Fix SSL_CLIENT_VERIFY value when optional_no_ca and SSLSessionCache
    are used and SSL session is resumed (#1170206)
  - mod_ssl: fix memory leak on httpd reloads (#1181690)
  - mod_ssl: use SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA (#1118476)
  - mod_cgi: return error code 408 on timeout (#1162152)
  - mod_dav_fs: set default value of DAVLockDB (#1176449)
  - add Documentation= to the httpd.service and htcacheclean.service (#1184118)
  - do not display "bomb" icon for files ending with "core" (#1170215)
  - add missing Reason-Phrase in HTTP response headers (#1162159)
  - fix BuildRequires to require openssl-devel >= 1:1.0.1e-37 (#1160625)
  - apachectl: ignore HTTPD variable from sysconfig (#1214401)
  - apachectl: fix "graceful" documentation (#1214398)
  - apachectl: fix "graceful" behaviour when httpd is not running (#1214430)