We use Fedora 17 for our web server and we are currently going through PCI audit. We can't seem to pass our external penetration scan test because the scan result says that our httpd (version 2.2.22) has current vulnerabilities and we need to update to version 2.4.2. However fedora 17 does not find this version when I try to do a yum update..How can I update the apache so I can pass this scan??
apache 2.4 is a major version which introduce a lot of changes, especially in the configuration management and right access. There is no plan to have it in fedora 17, it will be in fedora 18.
If you really want this version, you can try RPM available in my "dev" repository which provides backport of httpd and most of mod_* packages
See : http://rpms.famillecollet.com/fedora/17/devs/x86_64/repoview/
Please do not attempt to build from source. Use the package management capabilities that rpm provides. I see that 2.4 has been built for F18, F19. There are two things you can do:
Set up your build environment as described here: http://fedoraproject.org/wiki/How_to_create_a_GNU_Hello_RPM_package#Development_environment
Grab the latest available srpm from here and download it into the ~/rpmbuild/SRPMS directory
Install the srpm rpm -Uvh <srpm> This will unpack the srpm and place the SPEC file in ~/rpmbuild/SPECS
Install the BuildRequires: Open the SPEC file in your favourite text editor, and install all the packages listed as "BuildRequires:" using yum:
su -c 'yum install package1 package2 package3...'
Build yourself an rpm: rpmbuild -ba <srpm>
The resulting rpm will be in ~/rpmbuild/RPMS/
You can then install the rpm using yum:
su -c 'yum localinstall *path to new rpm*'
apache 2.4 if a major version which introduce a lot of changes, especially in the configuration management and right access. There is no plan to have it in fedora 17, it will be in fedora 18.
If you really want this version, you can try RPM available in my "dev" repository which provides backport of httpd and most of mod_* packages
See : http://rpms.famillecollet.com/fedora/17/devs/x86_64/repoview/
httpd (.2.22-4.fc17) is the only latest version in fedora repository right now,for 2.4 you need to compile it from source or make a binary from source
Using Apache With RPM Based Systems (Redhat / CentOS / Fedora)
@Akshay, try and use the fedora docs for building stuff. We know they work. We have no guarantee for other docs.
Not to mention that changes the package maintainers have made to make the package suitable for Fedora will not be present in non fedora spec files!
Asked: 2012-08-09 23:23:36 -0600
Seen: 5,033 times
Last updated: Aug 12 '12
Ask Fedora is community maintained and Red Hat or Fedora Project is not responsible for content. Content on this site is licensed under a CC-BY-SA 3.0 license.
