Hi, Kee. It should be possible, but you may need to build a recent version from sources. Let me ask around in our security channel. May I also ask which exactly vulnerabilities your scan did show in 4.2.3? It's relatively recent package, I mean.

Hi @Aliaksandr.Samuseu, The vulnerability detected on the scan is Apache 2.4.x < 2.4.53 Multiple Vulnerabilities . Thanks.

I don't see any issue updating the version of Apache. Be careful if mutual TLS is in use.

Hi @Michael.Schwartz, thanks for the feedback. @Aliaksandr.Samuseu, please advise how to upgrade apache web server in Gluu container? Thanks.

Hi @Aliaksandr.Samuseu, how can we upgrade the apache web server in Gluu Container? Thanks.

Hi @Aliaksandr.Samuseu , please advise on how to upgrade apache web server in Gluu container. Appreciate your reply. Thanks.

Hi, Kee. Sorry for the long wait. I asked dev team to confirm, and it seems the procedure is straightforward (make sure you'll backup your container before proceeding and can revert the changes quickly): 1. Stop the service `# service httpd stop` 2. Back up your entire configuration directory, just in case some vital files get overwritten: - `# cp -R /etc/httpd/ ~/httpd_config_backup` - `# cp /etc/certs/httpd.* ~/httpd_config_backup/` 3. Run `# yum install httpd` - it should suggest you to upgrade the package and its dependencies 4. Verify the result; use `diff` to make sure the core files are still the same: - `# diff -c ~/httpd_config_backup/conf/httpd.conf /etc/httpd/conf/httpd.conf` - `# diff -c ~/httpd_config_backup/conf.d/https_gluu.conf /etc/httpd/conf.d/https_gluu.conf` - `# diff ~/httpd_config_backup/httpd.key /etc/certs/httpd.key` (then the cert file as well) 5. Start it again `# service httpd start` You can check version before and after with `# yum info httpd` or `# httpd -V` to make sure it worked.

Hi @Aliaksandr.Samuseu , Thanks for the steps. As the servers do not have Internet access, we will proceed with offline upgrade for the Apache web server. Thank you.

Hello Kee Wee, Just touching base... how did it go? Thanks!

Hi Mohib, We have tested in our lab on the upgrade and it looks ok. We are currently raising the request to apply the patches to the customer's environment. Thank you and we can close this ticket.