RHEL3.9 upgrade Apache 2.0.46 to 2.0.59

RHEL3.9 Apache 2.0.46

Hi All:

For security reasons it looks like I may need to upgrade the Apache
httpd software on one of my production servers. The server in
question is currently running RHEL3 Update 9 which includes Apache
2.0.46. I have been asked to disable the HTTP TRACE which appears
to be enabled by default. I have located the TraceEnable config
parameter but this appears to be only available in 2.0.55+. I have
check the Apache site and they have an RPM available for 2.0.59.

I am hesitant to upgrade a production sever with other than Red Hat
supplied and tested packages for the primary server components. I
do not mind doing this for add-ons and utilities but not something
as key as the web server software.

My questions are:

1. Is this really required or can I disable the HTTP TRACE using
another method?

2. Has anyone done this type of upgrade and did you encounter any
problems?

Any additional comments or suggestions welcome.

TIA

Regards, Hugh

--
Hugh E Cruickshank, Forward Software, www.forward-software.com

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Undefined symbol: PL_perl_destruct_level after upgrading....
    ... "test upgrade" and all that):P ... Basically, I recently upgraded apache, mysql & php using http:// ... it seems that _somehow_ Perl 5.8.0 was ... installed on the Woody server I admin. ...
    (Debian-User)
  • Re: Compiling in Debugging Flags
    ... trouble with apache crashing on a recently upgraded server. ... sandbox server after upgrade to 7.0-RELEASE. ... ports that are built to have debug symbols. ...
    (freebsd-questions)
  • RE: RHEL3.9 upgrade Apache 2.0.46 to 2.0.59
    ... For security reasons it looks like I may need to upgrade the Apache ... httpd software on one of my production servers. ...
    (RedHat)
  • Re: Want to upgrade Fedora, 6 to current. Advice or tips please!
    ... "I host 3 domains on apache" be the decision's driving force." ... Yes, stability is important as is security, at the moment he has some stability but no security and both RHEL and CentOS are bad choises if he wants to upgrade his current installation, but both would be excellent options if he does a fresh install, but from economical point of view CentOS may be the absolute best option in this case. ... fallback for the three domain Apache server. ...
    (alt.os.linux)
  • Re: Apache vulnerability checking
    ... I thought that when I'm sure it's an apache server ... Full server version: ... probably for compatibility reasons the upgraded RPM didn't upgrade ... to exploit the vulnerability. ...
    (Vuln-Dev)