3. Rename your Apache2.2 directory to Apache2.2old4. Unzip the new version to the same location as the original Apache2.2 directory. 5. Delete the config and htdocs folder from the new version (And any other folders that may have files in them changed by you). 6. Copy, from the old version, the same folders you deleted in step 5 to get your modified files into the new version. (MAKE SURE YOU COPY AND NOT CUT!!!!) You want the original Apache to stay intact in the renamed folder from step 3.
7. Start the Apache service 8. TestIf the new version does not work and you need to roll back to the old version, just shut down the apache service, delete the entire Apache2.2 folder, then rename the Apache2.2old folder back to Apache2.2, then restart the Apache service.
On Wed, 10 Jun 2015 18:30:49 +0100 Salami Kehinde Rasheed <kennysalaam@xxxxxxxxx> wrote:
Hello Yehuda Katz, The apache is running on Window Server 2008 R2, It is running as a service, The directory of the httpd is C:\Program Files (x86)\Apache Software Foundation\Apache2.2\bin How can I go from here, Kindly assistOn Wed, Jun 10, 2015 at 6:34 AM, Yehuda Katz <yehuda@xxxxxxxxxx> wrote:On Tue, Jun 9, 2015 at 2:45 PM, Salami Kehinde Rasheed < kennysalaam@xxxxxxxxx> wrote:I need step-by-step to make apache-httpd-upgrade-2_2_29, what todownload and how to apply this on production environment(Window Server 2008and 2012R2) I want to close *Apache HTTPD: mod_status buffer overflow (CVE-2014-0226)* vulnerability, I want to close *Apache HTTPD: insecure LD_LIBRARY_PATH handling (CVE-2012-0883)* VulnerabilityI got advice to upgrade to 2.2.29 of httpd and I am running on windowserver machine... Kindly assist on how I can handle this without causing disruption on this operation.This depends greatly on where your current distribution of HTTPD is from. Did you build it yourself or did you download binaries from a website andif so, which site?How is HTTPD set up on your current system? Does it run as a service? Whatis the path to the executables and libraries? Are you using any non-standard modules?You should obtain the new version from the same place you obtained the oldversion from.I would make a backup copy of the entire HTTPD directory and then just overwrite all the files except the configuration with the new files youdownloaded.That is probably as detailed as you can get without more information aboutyour current environment. - Y-- *[image: Inline image 2]* *SALAMI KEHINDE R* *+234-8056511120*
--------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|