Upgrade versions of Apache and OpenSSL (LibreSSL)

Send your feedback to Apple: Product Feedback - Apple

If you’re a developer, expect to embed your own TLS in your app, if App Transport Security is inappropriate for your particular case. Your own web server too, if that’s needed.

If you’re trying to run a private or test server, what’s installed with macOS is fine, or you can use MAMP or XAMPP packages, or can load your own. MAMP and XAMPP are handy, those include various common add-ons. MAMP Pro, too.

For production, yeah, it gets messy particularly since macOS Server was vaporized a while back; with macOS 10.14 and later. With the end of Server, I generally wouldn’t recommend running macOS as an exposed and production server, mostly due to the effort involved in keeping everything updated manually.

And no, Apple doesn’t provide a way to update just certain parts of macOS itself.

Apple maintains its own versions of these apps. Any vulnerabilities that you might hear about may not apply to the Apple version.

Also, macOS isn't designed to be a server. The built-in Apache is useable for basic development and testing, but that's about all. It would not be worthwhile to try to get it setup to serve any secure sites.

When dealing with this kind of security publicity, the best course of action is to ignore it and stop reading those sites. Anything you hear on the internet regarding Apple security is wildly inaccurate and biased.