How do you update the default install of Apache to 2.4.27? An internal audit identified a software vulnerability, a server needs to be upgraded to Apache 2.4.27 or higher. The latest software update (10.12.6) only brought it up to 2.4.25. If this is no way to update Apple's default install, can it be disabled and install MacPorts or home-brew without loss in functionality?
Hello Jason Bak,
Apache is disabled by default. If you want to install a more recent version, you would have to install it from source, as Eric Root suggests, or install some 4th-party version like MacPorts or HomeBrew.
In any event, a Mac should never be used as a public-facing server. The only legitimate reason to use Apache is for development purposes where clients are only from localhost. The Apache config files should be configured to enforce that. Hopefully, this would make Apache, even if running, invisible to your internal audit system.
Ran as an internal file server for a small marketing department. Apache is only enabled to run a wiki for common issues for interns and others. I'll disable and we'll go from there.
How to update to Apache 2.4.27
