0

Security scan revealed following vulnerabilities in fully patched and updated 5.10 Wiley distro:

CVE-2015-0253 CVE-2015-0228 CVE-2015-3185

Apache Security confirm 2.4.12 is vulnerable here.

Question is, what is the best way to mitigate these vulnerabilities and will the repos ever have the new 2.4.16 apache available?

Improve this question

1 Answer 1

Reset to default
0

You should already have the most up-to-date version available through the official repositories.

However, you can use an external repository that provides newer releases. This Launchpad PPA has all the way up to 2.4.17 available for Wily (15.10).

You can add it via

sudo add-apt-repository ppa:ondrej/apache2
sudo apt-get update
sudo apt-get upgrade

If you still don't have the newer version of Apache2, try running sudo apt-get install dist-upgrade.

After all of these are run, you should have the updated (and thus patched) version of Apache2!

Improve this answer
3
  • Thanks, I tried doing the update through the official repositories and nothing came up: $ sudo apt-get upgrade 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. $ sudo apt-get dist-upgrade 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. $ apache2ctl -V Server version: Apache/2.4.12 (Ubuntu) I guess what I'm asking for is when will it be available through the official repositories?
    – YouDontNeedMyName
    Nov 18, 2015 at 23:29
  • Checked the Link listed for Launchpad PPA given and there are two words which stand out and make me nervous... "unsupported" and "untrusted". Is there another "supported" path I can follow as this is a production server?
    – YouDontNeedMyName
    Nov 18, 2015 at 23:38
  • @YouDontNeedMyName The only reason that they say that is to differentiate it from the official repositories. Many people have recommended and/or use that repository, the PPA just provides the updates from the Debian Apache2 in an easy-to-access form.
    – RPiAwesomeness
    Nov 20, 2015 at 16:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .