Apache 2.4.26

English Install/Boot/Login
#1

Hello,

  I ran openSUSE Leap 42.2 with Apache 2.4.23-8.9.1.
  I upgraded to openSUSE Leap 42.3. With this upgrade, I hoped       Apache would upgrade to Apache 2.4.26.
  Unfortunately it isn't the case. Also after upgrading openSUSE,       there are no patches available for Apache.
  
  How to upgrade to Apache 2.4.26?
  
  Kind regards,
  Philip
#2

Is there a specific reason you want 2.4.26? (or rather 2.4.27 since it fixes a CVE)

It’s available for 42.3 from this repository:

http://download.opensuse.org/repositories/Apache/openSUSE_Leap_42.3/Apache.repo
#3

A Nessus scan showed a vulnerability.
So therefore I want to upgrade.
Thank you for the reply.

#4

Nessus is incorrect in this regard because SUSE backports fixes to the older versions - Nessus does not understand this as it only blindly scans the version number and ignores everything else.

#5

That’s very interesting.
Thank you for the update.

#6

Sorry for asking, but when I add:
http://download.opensuse.org/repositories/Apache/openSUSE_Leap_42.3/Apache.repo
as a repository, I get the message:
Unable to create repository

Can you tell me what went wrong?

#7

Hi
You don’t need the Apache.repo part…


zypper ar -f -g -n "openSUSE-Leap-42.3-Apache" http://download.opensuse.org/repositories/Apache/openSUSE_Leap_42.3/ repo-Apache
zypper ref
#8

Managed to update Apache.
I didn’t know that you can choose a version in the Yast patches window.
Under tab “Versions” for apache2 I choose “2.4.27-125.1-x86_64 from openSUSE-Leap-42.3-Apache with priority 99 and vendor…”.

Af some “Conflict Resolution” messages, I finally have an updated webserver.

Thank you all.

#9

In your case, as per example you should have done a

zypper dup --from repo-Apache

also known as vendor-switch.

And, since you’ve registered as dutch
https://forums.opensuse.org/showthread.php/526392-openSUSE-42-3-releaseparty-Rotterdam-23-sept-2017?p=2833332#post2833332