You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Kushagra Bindal <bi...@gmail.com> on 2020/05/05 12:39:47 UTC
[users@httpd] Http Server 2.4.43 version RPM
Hi Experts,
I am new to HTTP Server. We are currently running on centos 7.7 version and
we are currently using httpd-2.4.6-90.el7.centos.x86_64 version.
This version is having multiple vulnerabilities and thus we need to upgrade
our system to latest available version i.e. 2.4.43. But I am not able to
found any rpm file which I can use on my centos 7.7 environment.
Please suggest me the right way of doing the things.
--
Regards,
Kushagra
Re: [users@httpd] Http Server 2.4.43 version RPM
Posted by Kushagra Bindal <bi...@gmail.com>.
Thanks all for your response. Let me try the same and let you know in case
I will be needing any help.
On Wed, May 6, 2020, 12:06 AM edflecko . <ed...@gmail.com> wrote:
> Oops...I see a typo I made. Try this:
>
> yum install yum-changelog -y
> yum changelog httpd
> yum install wget epel-release -y
> cd /etc/yum.repos.d && wget https://repo.codeit.guru/codeit.el`rpm
> <https://repo.codeit.guru/codeit.elrpm> -q --qf "%{VERSION}" $(rpm -q
> --whatprovides redhat-release)`.repo
> yum info httpd
> yum install httpd -y
>
> Ed
>
> On Tue, May 5, 2020 at 11:34 AM edflecko . <ed...@gmail.com> wrote:
>
>> yum install yum-changelog -y
>> yum changelog httpd
>> yum install -y wget epel-release -y
>> cd /etc/yum.repos.d && wget https://repo.codeit.guru/codeit.el`rpm
>> <https://repo.codeit.guru/codeit.elrpm> -q --qf "%{VERSION}" $(rpm -q
>> --whatprovides redhat-release)`.repo
>> yum info httpd
>> yum install httpd -y
>>
>> Ed
>>
>> On Tue, May 5, 2020 at 8:04 AM Richard <
>> lists-apache@listmail.innovate.net> wrote:
>>
>>>
>>>
>>> > Date: Tuesday, May 05, 2020 18:09:47 +0530
>>> > From: Kushagra Bindal <bi...@gmail.com>
>>> >
>>> > Hi Experts,
>>> >
>>> > I am new to HTTP Server. We are currently running on centos 7.7
>>> > version and we are currently using
>>> > httpd-2.4.6-90.el7.centos.x86_64 version.
>>> >
>>> > This version is having multiple vulnerabilities and thus we need to
>>> > upgrade our system to latest available version i.e. 2.4.43. But I
>>> > am not able to found any rpm file which I can use on my centos 7.7
>>> > environment.
>>> >
>>>
>>> The current release of centos is 7.8, which includes
>>> httpd-2.4.6-93.el7. The RH (and so centos) approach is to keep the
>>> base release of a package as stable as possible over the life of the
>>> RH release. To do this they backport security, bug fixes and
>>> enhancements into the package base -- hence the "-93" on their
>>> current httpd 2.4.6 package naming. They tend to be very good and
>>> current on these updates, so I suspect (without going through all the
>>> CVEs) that the announced security issues have been dealt with in the
>>> current RH/centos -93 release. You can check any CVEs you have
>>> specific concern about against their announcements and change logs.
>>>
>>> There may be other, functional, reasons to move to 2.4.43, but I
>>> don't think that open CVEs is likely one of them.
>>>
>>>
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>
>>>
Re: [users@httpd] Http Server 2.4.43 version RPM
Posted by "edflecko ." <ed...@gmail.com>.
Oops...I see a typo I made. Try this:
yum install yum-changelog -y
yum changelog httpd
yum install wget epel-release -y
cd /etc/yum.repos.d && wget https://repo.codeit.guru/codeit.el`rpm -q --qf
"%{VERSION}" $(rpm -q --whatprovides redhat-release)`.repo
yum info httpd
yum install httpd -y
Ed
On Tue, May 5, 2020 at 11:34 AM edflecko . <ed...@gmail.com> wrote:
> yum install yum-changelog -y
> yum changelog httpd
> yum install -y wget epel-release -y
> cd /etc/yum.repos.d && wget https://repo.codeit.guru/codeit.el`rpm
> <https://repo.codeit.guru/codeit.elrpm> -q --qf "%{VERSION}" $(rpm -q
> --whatprovides redhat-release)`.repo
> yum info httpd
> yum install httpd -y
>
> Ed
>
> On Tue, May 5, 2020 at 8:04 AM Richard <li...@listmail.innovate.net>
> wrote:
>
>>
>>
>> > Date: Tuesday, May 05, 2020 18:09:47 +0530
>> > From: Kushagra Bindal <bi...@gmail.com>
>> >
>> > Hi Experts,
>> >
>> > I am new to HTTP Server. We are currently running on centos 7.7
>> > version and we are currently using
>> > httpd-2.4.6-90.el7.centos.x86_64 version.
>> >
>> > This version is having multiple vulnerabilities and thus we need to
>> > upgrade our system to latest available version i.e. 2.4.43. But I
>> > am not able to found any rpm file which I can use on my centos 7.7
>> > environment.
>> >
>>
>> The current release of centos is 7.8, which includes
>> httpd-2.4.6-93.el7. The RH (and so centos) approach is to keep the
>> base release of a package as stable as possible over the life of the
>> RH release. To do this they backport security, bug fixes and
>> enhancements into the package base -- hence the "-93" on their
>> current httpd 2.4.6 package naming. They tend to be very good and
>> current on these updates, so I suspect (without going through all the
>> CVEs) that the announced security issues have been dealt with in the
>> current RH/centos -93 release. You can check any CVEs you have
>> specific concern about against their announcements and change logs.
>>
>> There may be other, functional, reasons to move to 2.4.43, but I
>> don't think that open CVEs is likely one of them.
>>
>>
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
Re: [users@httpd] Http Server 2.4.43 version RPM
Posted by "edflecko ." <ed...@gmail.com>.
yum install yum-changelog -y
yum changelog httpd
yum install -y wget epel-release -y
cd /etc/yum.repos.d && wget https://repo.codeit.guru/codeit.el`rpm -q --qf
"%{VERSION}" $(rpm -q --whatprovides redhat-release)`.repo
yum info httpd
yum install httpd -y
Ed
On Tue, May 5, 2020 at 8:04 AM Richard <li...@listmail.innovate.net>
wrote:
>
>
> > Date: Tuesday, May 05, 2020 18:09:47 +0530
> > From: Kushagra Bindal <bi...@gmail.com>
> >
> > Hi Experts,
> >
> > I am new to HTTP Server. We are currently running on centos 7.7
> > version and we are currently using
> > httpd-2.4.6-90.el7.centos.x86_64 version.
> >
> > This version is having multiple vulnerabilities and thus we need to
> > upgrade our system to latest available version i.e. 2.4.43. But I
> > am not able to found any rpm file which I can use on my centos 7.7
> > environment.
> >
>
> The current release of centos is 7.8, which includes
> httpd-2.4.6-93.el7. The RH (and so centos) approach is to keep the
> base release of a package as stable as possible over the life of the
> RH release. To do this they backport security, bug fixes and
> enhancements into the package base -- hence the "-93" on their
> current httpd 2.4.6 package naming. They tend to be very good and
> current on these updates, so I suspect (without going through all the
> CVEs) that the announced security issues have been dealt with in the
> current RH/centos -93 release. You can check any CVEs you have
> specific concern about against their announcements and change logs.
>
> There may be other, functional, reasons to move to 2.4.43, but I
> don't think that open CVEs is likely one of them.
>
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
Re: [users@httpd] Http Server 2.4.43 version RPM
Posted by Richard <li...@listmail.innovate.net>.
> Date: Tuesday, May 05, 2020 18:09:47 +0530
> From: Kushagra Bindal <bi...@gmail.com>
>
> Hi Experts,
>
> I am new to HTTP Server. We are currently running on centos 7.7
> version and we are currently using
> httpd-2.4.6-90.el7.centos.x86_64 version.
>
> This version is having multiple vulnerabilities and thus we need to
> upgrade our system to latest available version i.e. 2.4.43. But I
> am not able to found any rpm file which I can use on my centos 7.7
> environment.
>
The current release of centos is 7.8, which includes
httpd-2.4.6-93.el7. The RH (and so centos) approach is to keep the
base release of a package as stable as possible over the life of the
RH release. To do this they backport security, bug fixes and
enhancements into the package base -- hence the "-93" on their
current httpd 2.4.6 package naming. They tend to be very good and
current on these updates, so I suspect (without going through all the
CVEs) that the announced security issues have been dealt with in the
current RH/centos -93 release. You can check any CVEs you have
specific concern about against their announcements and change logs.
There may be other, functional, reasons to move to 2.4.43, but I
don't think that open CVEs is likely one of them.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org