1

Recently after vulnerability assessment and penetration testing we are asked to upgrade our apache ubuntu version. Below is the screenshot attached. The solution they proposed is Update version of Apache to fix these vulnerabilities

vulnerability Testing

PHP info details

PHP Version 5.5.9-1ubuntu4.4
Apache Version  Apache/2.4.7 (Ubuntu)

Being a newbie, I have below questions

  1. What is the correct approach to upgrade Apache ?
  2. If I do it, will this also upgrade my PHP version ?

P.S. The site is running joomla and some core php applications

Improve this question
8
  • See this link help.ubuntu.com/community/UpgradeApacheHTTPServer
    – Sanoob
    Mar 3, 2016 at 13:19
  • How about creating VM and perform some operations on that ? and If everything goes ok do the same steps on your live server
    – Juned
    Mar 4, 2016 at 5:02
  • @waki, the screenshot is sent by vulnerability assessment and penetration testing team and they suggested to upgrade apache version. @juned, what kind of operations. I just need to know the dependency of apache upgrade on php application and also the method to upgrade.
    – Slimshadddyyy
    Mar 4, 2016 at 5:02
  • 1
    What vulnerability assessment and penetration testing you referring here, that URL(/etc/passwd) ?
    – Juned
    Mar 4, 2016 at 5:16
  • 1
    Tell your pentest team to come back with a better screenshot. The current one is meaningless, unless they're complaining about the server information shown, which is easily obtained even if hidden.
    – muru
    Mar 8, 2016 at 18:50

0

Reset to default

You must log in to answer this question.