Apache2 - 2.4.62

[Colin Law]

On Mon, 28 Apr 2025 at 21:32, Jerry Geis <jerry.geis at gmail.com> wrote:

>
>
> On Mon, Apr 28, 2025 at 4:14 PM Colin Law <clanlaw at gmail.com> wrote:
>
>> On Mon, 28 Apr 2025 at 19:04, Jerry Geis <jerry.geis at gmail.com> wrote:
>>
>>>
>>> Curious - Why the updated apache would not be in the normal "update"
>>> process. Especially since there is a CVE for it.
>>> Why would I have to load a different repo ?
>>>
>>
>>
>> Which CVE is that?  If it is serious then I would expect it to be patched
>> in the official Ubuntu release.
>>
>> Colin L.
>>
>> --
>> ubuntu-users mailing list
>> ubuntu-users at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>
>
> one of them was CVE-2024-36387
> The website (https://ubuntu.com/security/CVE-2024-36387)  says fixed -
> but the scan was flagging it as an issue.
>
> When I did "apache2 --version" this did not show 2.4.58-1ubuntu8.2 (which
> is there version saying it was fixed in)
> only 2.4.58
>

Run
sudo apt upgrade && sudo apt full-upgrade
then what does this show?
apt policy apache2

Colin L.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20250428/20adeb69/attachment.html>