Fixed: Apache must not follow symlinks when the target file owner doesn't match with the symlink owner (security)
(cherry picked from commit 53a2742)