Hi
Can anyone tell me how we request updates to sub-components ??
I see many werks for updates to NagVis , but I would like to request Apache to be updated, mainly because of a security concern ( from my security team )
CVE-2019-0211 Security Rationale: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.
usually (e.g. in case of nagvis, checkmk, Event Console) the checkmk packages are updated and you just have to upgrade checkmk.
Apache2 is a different story, as checkmk is only spawning apache processes from the underlying linux distribution in the context of the site users, but is not shipping apache2 binaries itself.
So if you want to update apache2, you have to update your distribution packages.
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.