Applying Apache security patches

[jbo]

Hello,

I have a Redhat 6.1 box that I am replacing with a 7.2 box very soon but the latest apache security bug has me concerned. Unfortunately Redhat does not have a patch out for 6.1 but they do for 6.2. I have tested the patch using rpm -Fv --test <apache.rpms> and it does not give me any errors or dependencies. Does anyone know if I can apply a patch destined for 6.2 on a 6.1 box?

Thanks for any info.

[Golden_Eternity]

After a certain point in development, Red Hat will only maintain patches for their .2 release (or at least that's how it used to be before they broke the numbering scheme with 7.3)... So there will only be errata rpms released for 6.2.

You can install/upgrade rpms for different releases, but there are a couple things to consider...

The first issue, you've already checked on... you don't seem to have any dependency issues.

Second, ease of maintenance. When you start getting rpms on your system that don't come from your particular redhat release, things start getting a bit less straightforward... There's not much you can do about this, though.

So go ahead and apply the patch, if you're vulnerable... I've seen worm attempts from a dozen sites or so.

BTW, the worm only attacks freebsd, but that doesn't mean linux is safe... just safe from the current worm.

[jbo]

Thanks for the info. I applied the patch and restarted the service and apache is still workin'!