Re: Apache RPM's

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



I love CentOS, but I am seriously regretting selecting Centos 4.4 for my
production hosting servers. The current situation with CentOS 4.4 and being
stuck at Apache 2.0.52 is a huge problem because of the new requirements for
the Credit Card industry PCI scan. Apache 2.0.52 does not pass PCI
compliance scans. which means no ecommerce on any of these servers - MAJOR
ISSUE. So my question to the community is: when are new Apache RPM's going
to be released or at minimum a backported version that plugs these security
holes so we can pass PCI scans. Apache 2.0.52 has some major issues that
need to be dealt with?

Help us out here. I know I am not the only one in this situation. every
hosting company that uses Ensim Pro X is just where I am.
Any insight or better yet a solution to this would be great.

Are you actually using CentOS 4.4 or are you using a fully updated version of CentOS 4.6? If you are fully updated, or simply download the latest CentOS 4 httpd package and run "rpm -q --changelog httpd | less" for an installed package or "rpm -qp --changelog /path/to/httpd/package | less" for a downloaded, but not yet installed package, you can see all of the changes, complete with which CVE issues have been addressed in each package build.

Barry
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux