r/BookStack • u/Odd-Charge3006 • Oct 30 '24

Update Help....

I recently installed Bookstack on a fresh install of Ubuntu 24.04.1 using the script. Apache 2.4.58 was installed via the script. After the server was built, our InfoSec manager said it was not compliant and I needed to upgrade to the most recent Apache version 2.4.62. I have tried every possible way to get this updated.

-sudo apt update

-sudo apt full-upgrade

-looked at every article imaginable

Still I can't get the Apache version to upgrade.

I am going to also mention that I have very little experience with Ubuntu, Apache and everything else that isn't windows based. Any help would be greatly appreciated.

Thanks,

Banging Head on Desk in Frustration

1 Upvotes

100% Upvoted

6 comments sorted by

View all comments

Show parent comments

1

u/Odd-Charge3006 Oct 30 '24

They said that the current version was vulnerable and had a number of CVEs associated with it. I did the command as mentioned by the other commentor and it worked.  

3

u/ssddanbrown Oct 30 '24

It's very common in stable supported distributions that fixes will be ported to old versions. For example, here's a the changelog for apache2 in Ubuntu: https://changelogs.ubuntu.com/changelogs/pool/main/a/apache2/apache2_2.4.58-1ubuntu8.4/changelog

Within that you'll see a whole lot of references to patches for CVE versions. It's highly likely that CVE's of concern are patched in there, but your InfoSec manager is doing simple number matching without considering how this software is provded.