apache upgrade to 2.4.48

Question

Level 1

8 points

apache upgrade to 2.4.48

We are trying to upgrade the default apache that comes with Mac OS to version 2.4.48. This is a requirement from our security for the machines to stay in compliance.

I noticed there are similar threads, but I did not see a recommended way to upgrade the default version.

I also noticed that Apple does upgrade the default version of apache with security updates, but I could not find any information about how frequently that is done. Could we rely to Apple security updates to upgrade the apache version on some cadence?

Posted on Jun 9, 2021 11:07 AM

Reply

Answer 1

Top-ranking reply

etresoft

Level 9

57,008 points

Jun 9, 2021 11:11 AM in response to sandy898

You cannot replace the built-in version of Apache. It is part of the operating system. You get what you get, when you get it.

If you have requirements to use a specific version of Apache, then you will need to manually install your own version into /usr/local or some other non-system location. Disable the system version and use your own.

Note that macOS is a consumer operating system. It is not designed to be used as a server. All of the security and privacy considerations are from the perspective of consumer users.

Reply

Answer 2

Jun 9, 2021 11:14 AM in response to sandy898

Sorry I don't know about the Apple Apache update schedule but if it is critical to use a different Apache version maybe you could look into products like xampp or mamp.

Reply

Answer 3

sandy898 Author

Level 1

8 points

Jun 9, 2021 11:30 AM in response to BobTheFisherman

Thanks @etresoft and @BobTheFisherman for the suggestions.

From what I am gathering, the best option here would be to manage a separate install of Apache which we can upgrade as needed. The default Apache cannot be upgraded or deleted by us as it is managed by Apple. Is that correct?

Reply

Answer 4

sandy898 Author

Level 1

8 points

Jun 9, 2021 12:33 PM in response to BobTheFisherman

Thanks, I will look into the suggested options.

Note that macOS is a consumer operating system. It is not designed to be used as a server. All of the security and privacy considerations are from the perspective of consumer users.

I think the question about upgrading default Apache still applies as there are vulnerabilities that need to be addressed. As macOS is tightly managed by Apple, from my perspective it put onus on Apple to manage these in a timely manner. Or allow users to manage this.

Reply

Answer 5

Jun 9, 2021 11:32 AM in response to sandy898

That is what I would recommend.

But etresoft's point about security is a good valid consideration.

Reply

apache upgrade to 2.4.48

Similar questions