CentOS Apache update 2

[Hondy]

Hi

Can anyone tell me how to:

"yum update apache" to 2.2.9? its currently 2.2.8 but doesn't seem to update?

I appreciate this maybe more of a CentOS thing but perhaps someone here knows?

Thanks

 

[thedaver]

More than likely this release, noted as mostly patches by Apache Foundation, has been incorporated in one of the RedHat customary "sub" patch versions that I so dislike in their version practice...

If you do "rpm -qa | grep -i http", more than likely the apache/httpd version will be 2.2.8-x.y-z or something like that...

Centos takes their files from RedHat ES (or is it AS?). RedHat is (in-)famous for screwing around with the source vendor's versions when RH doesn't deem the new version needful of a release... they simply integrate the same patches and declare the package to be functionally equivalent - which is probably is..

I tried looking in the Centos 5.2 repository lists to see what http version is current and didnt' find it quickly...

More than likely you're up to date with the functionality published by apache.

D.E.R. Management - IT Project Management Consulting

http://www.dermanagement.com/

 

[Hondy]

thats annoying, as there are a few vulnerabilities with 2.2.8 so I'd like to know that its patched as best as possible.

Its got mod_security installed and I think that is going to have this covered as this sort of appears in your version check command but I'll check for sure, thanks thedaver

 

[RhythmAce]

thedaver is correct. If you take a look at all of the apache webservers around the internet you will see that many if not most of them are still using ver. 1.3.x. This does not mean they are any less secure than the 2.2.9 you are looking for. If you cannot be convinced of this, take a look at

http://www.rpmfind.net/linux/rpm2html/search.php?query=httpd.

The first thing you will notice is that only bleeding edge distros have 2.2.9. If I can add one more thing, the apache package is called httpd so you would use "yum update httpd".

 

[Hondy]

hmm I see but 1.3.x is a version different, like windows 2003 and windows 2008, both have their own set of problems.

i tried yum update apache and yum update httpd, both work, but there are no updates available.

mysterious stuff this apache

 

[RhythmAce]

I know they are different. The point thedaver and I are trying to make is that many updates don't show an update in the version number. I have yum configured to update automatically. I have a server that has CentOS 5.2 installed. Apache reports version 2.2.3 and the build date of Jan '08. Logwatch shows me that httpd has but updated a few times since then. It is a safe bet that if I get a fresh build such as 2.2.9 it will have those updates included.

 

[Hondy]

ahh I see, where did you get the build date from? When I ran the rpm grep command it doesn't show this info (noob question)

 

[RhythmAce]

httpd -v