Summary
[2.4.6-40.0.1.4]
- replace index.html with Oracle's index page oracle_index.html
[2.4.6-40.4]
- add security fix for CVE-2016-5387
[2.4.6-40.3]
- add 451 (Unavailable For Legal Reasons) response status-code (#1353269)
[2.4.6-40.2]
- mod_cache: treat cache as valid with changed Expires in 304 (#1347648)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | httpd | 0:2.4.6-40.0.1.el7_2.4 |
| Oracle Linux · 7 | httpd-devel | 0:2.4.6-40.0.1.el7_2.4 |
| Oracle Linux · 7 | httpd-manual | 0:2.4.6-40.0.1.el7_2.4 |
| Oracle Linux · 7 | httpd-tools | 0:2.4.6-40.0.1.el7_2.4 |
| Oracle Linux · 7 | mod_ldap | 0:2.4.6-40.0.1.el7_2.4 |
| Oracle Linux · 7 | mod_proxy_html | 1:2.4.6-40.0.1.el7_2.4 |
| Oracle Linux · 7 | mod_session | 0:2.4.6-40.0.1.el7_2.4 |
| Oracle Linux · 7 | mod_ssl | 1:2.4.6-40.0.1.el7_2.4 |
Vulnerabilities 1
-
Unscored —CVE-2016-5387 EPSS 56%
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from …