Dear Apache HTTPD Expert,
I am seek for you help and advice
for the patching or update my existing
Apache HTTPD-2.4.23 (Window 2016-64 bit running on VMWare
Server) to version HTTPD-2.4.42.
Could any Expert tell me where to download this HTTPD-2.4.42 and teach me the steps to do this update? I really appreciated of you help, advice, and thanks in advance!
Regards,
Hoay
8. Remediation Plan
8.1. Remediation Plan for 172.21.25.153
8.1.1. For Apache HTTPD 2.4.23
These vulnerabilities can be resolved by performing the following 4 steps. The total estimated time to perform all of these steps is 7 hours.
Upgrade to the latest version of Apache HTTPD Estimated time: 2 hours Download and apply the upgrade from: http://archive.apache.org/dist/httpd/httpd-2.4.42.tar.gz
The latest version of Apache HTTPD is 2.4.42. Many platforms and distributions provide pre-built binary packages for Apache HTTP server. These pre-built packages are usually customized and optimized for a particular distribution, therefore we recommend that
you use the packages if they are available for your operating system. This will address the following 30 issues:
Apache HTTPD: Padding Oracle in Apache mod_session_crypto (CVE-2016-0736) (apache-httpd-cve-2016-0736)
……………..
………………
CONFIDENTIALITY: This email is intended solely for the person(s) named and may be confidential and/or privileged. If you are not the intended recipient, please delete it, notify us and do not copy,
use, or disclose its contents.
Towards a sustainable earth: Print only when necessary. Thank you.
