upgrading apache to 2.2.21

2011-11-22 Thread drichards
Hello,
I am running Scientific Linux 6.0, which comes with Apache 2.2.15.
I need to upgrade it to 2.2.21.
I tried the following:
- yum remove httpd*
- take the httpd-2.2.21.tar.gz, build it and install httpd,suexec,apxs
- then config yum to exclude httpd*
- run yum updates
I get errors because it requires httpd-mmn (it is the magic number, I
understand).
Is it possible to get the httdp-mmn in synch? I can't see this in the
apache package.
Any help is appreciated,
  Dirce
__

-- Processing Dependency: /etc/httpd/conf.d for package:
1:perl-HTML-Mason-1.42
-2.el6.noarch
-- Finished Dependency Resolution
Error: Package: 1:perl-HTML-Mason-1.42-2.el6.noarch (epel)
Requires: /etc/httpd/conf.d
Error: Package: 1:mod_auth_mysql-3.0.0-11.el6_0.1.x86_64 (sl-security)
Requires: httpd-mmn = 20051115
Error: Package: mod_perl-2.0.4-10.el6.x86_64 (sl)
Requires: httpd-mmn = 20051115
Error: Package: squirrelmail-1.4.22-2.el6.noarch (epel)
Requires: httpd
Error: Package: mod_perl-devel-2.0.4-10.el6.x86_64 (sl)
Requires: httpd-devel
Error: Package: php-5.3.3-3.el6_1.3.x86_64 (sl-security)
Requires: httpd-mmn = 20051115
Error: Package: nocpulse-common-2.0.14-3.el6.noarch (epel)
Requires: httpd
Error: Package: php-5.3.3-3.el6_1.3.x86_64 (sl-security)
Requires: httpd
Error: Package: mod_nss-1.0.8-8.el6.x86_64 (sl)
Requires: httpd


Re: upgrading apache to 2.2.21

2011-11-22 Thread Tobias Fiebig
Heho,
 I am running Scientific Linux 6.0, which comes with Apache 2.2.15.
 I need to upgrade it to 2.2.21.
Please keep in mind that a manual installation will result in you having
to keep track of security updates.

 I tried the following:
 - yum remove httpd*
 - take the httpd-2.2.21.tar.gz, build it and install httpd,suexec,apxs
 - then config yum to exclude httpd*
 - run yum updates
 I get errors because it requires httpd-mmn (it is the magic number, I
 understand).
 Is it possible to get the httdp-mmn in synch? I can't see this in the
 apache package.
I would personally recommend creating a local package of apache 2.2.21
and then using yum localinstall. I will take a look at that anyway.

With best regards,
Tobias


Re: upgrading apache to 2.2.21

2011-11-22 Thread Tobias Fiebig
Heho,

On Tue, 2011-11-22 at 22:15 +0100, Tobias Fiebig wrote:
 I would personally recommend creating a local package of apache 2.2.21
 and then using yum localinstall. I will take a look at that anyway. 

Did take a look. See
http://bmu.wsp.wybt.net/repos/loserpms/SOURCE/httpd-2.2.21-1.sl6.1.src.rpm

Builds fine for me on x86_64, haven't tested other arch, but I assume
everything should work out just fine. Currently building rpms for
i386/x86_64, but i have to setup the unstable-repo-structure before. 

With best regards,
Tobias


Re: upgrading apache to 2.2.21

2011-11-22 Thread drichards
Thanks for your response.

 Heho,
 I am running Scientific Linux 6.0, which comes with Apache 2.2.15.
 I need to upgrade it to 2.2.21.
 Please keep in mind that a manual installation will result in you having
 to keep track of security updates.

The reason for the upgrade is to pick up the security fixes in 2.2.21.


 I tried the following:
 - yum remove httpd*
 - take the httpd-2.2.21.tar.gz, build it and install httpd,suexec,apxs
 - then config yum to exclude httpd*
 - run yum updates
 I get errors because it requires httpd-mmn (it is the magic number, I
 understand).
 Is it possible to get the httdp-mmn in synch? I can't see this in the
 apache package.
 I would personally recommend creating a local package of apache 2.2.21
 and then using yum localinstall. I will take a look at that anyway.



I will try to create the package with rpm.


With best regards,
 Tobias


Regards,

  Dirce


Re: upgrading apache to 2.2.21

2011-11-22 Thread drichards
Tobias,
I think we both replied at about the same time. I will try the package
that you indicated.
Thanks,
  Dirce

 Heho,

 On Tue, 2011-11-22 at 22:15 +0100, Tobias Fiebig wrote:
 I would personally recommend creating a local package of apache 2.2.21
 and then using yum localinstall. I will take a look at that anyway.

 Did take a look. See
 http://bmu.wsp.wybt.net/repos/loserpms/SOURCE/httpd-2.2.21-1.sl6.1.src.rpm

 Builds fine for me on x86_64, haven't tested other arch, but I assume
 everything should work out just fine. Currently building rpms for
 i386/x86_64, but i have to setup the unstable-repo-structure before.

 With best regards,
 Tobias



Re: [SCIENTIFIC-LINUX-USERS] upgrading apache to 2.2.21

2011-11-22 Thread Pat Riehecky

On 11/22/2011 03:39 PM, Dirce Richards wrote:

Thanks for your response.


Heho,

I am running Scientific Linux 6.0, which comes with Apache 2.2.15.
I need to upgrade it to 2.2.21.

Please keep in mind that a manual installation will result in you having
to keep track of security updates.

The reason for the upgrade is to pick up the security fixes in 2.2.21.

Are there any fixes present in 2.2.21 which are not present in 
httpd-2.2.15-9.sl6.3?


Our beloved upstream vendor backports security fixes all the time.  I 
would be surprised if there was a meaningful security issue that they 
haven't brought back.  That is one of the things they pride themselves on.


Pat

--
Pat Riehecky
Scientific Linux Developer


Re: upgrading apache to 2.2.21

2011-11-22 Thread Mark Stodola

dricha...@globalcerts.net wrote:

Thanks for your response.

  

Heho,


I am running Scientific Linux 6.0, which comes with Apache 2.2.15.
I need to upgrade it to 2.2.21.
  

Please keep in mind that a manual installation will result in you having
to keep track of security updates.



The reason for the upgrade is to pick up the security fixes in 2.2.21.
  
This is where TUV's practices can get one confused.  They have a habit 
(for good reason) of sticking with a version number on release and 
backporting patches (including security) as needed.  Sometimes it is 
worth reading the changelog/revision history for a specific package to 
save yourself some time in the long run.


Cheers,
Mark

--
Mr. Mark V. Stodola
Digital Systems Engineer

National Electrostatics Corp.
P.O. Box 620310
Middleton, WI 53562-0310 USA
Phone: (608) 831-7600
Fax: (608) 831-9591


upgrading apache to 2.2.21

2011-11-22 Thread Tobias Fiebig
Hello,

 I think we both replied at about the same time. I will try the package
 that you indicated.

 Our beloved upstream vendor backports security fixes all the time.  I 
 would be surprised if there was a meaningful security issue that they 
 haven't brought back.  That is one of the things they pride themselves on.

If you are upgrading concerning a security fix, I'd like to point out
that Pat is more than right. 
Which CVE are you specifically looking into?


Btw:
http://bmu.wsp.wybt.net/repos/loserpms/x86_64/
http://bmu.wsp.wybt.net/repos/loserpms/i386/

Build the rpms now.

With best regards,
Tobias


Re: [SCIENTIFIC-LINUX-USERS] upgrading apache to 2.2.21

2011-11-22 Thread drichards
Pat,

I could verify that all the security fixes are included in the 2.2.15
update. But we have a customer requirement to use Apache 2.2.21.

  Dirce

 On 11/22/2011 03:39 PM, Dirce Richards wrote:
 Thanks for your response.

 Heho,
 I am running Scientific Linux 6.0, which comes with Apache 2.2.15.
 I need to upgrade it to 2.2.21.
 Please keep in mind that a manual installation will result in you
 having
 to keep track of security updates.
 The reason for the upgrade is to pick up the security fixes in 2.2.21.

 Are there any fixes present in 2.2.21 which are not present in
 httpd-2.2.15-9.sl6.3?

 Our beloved upstream vendor backports security fixes all the time.  I
 would be surprised if there was a meaningful security issue that they
 haven't brought back.  That is one of the things they pride themselves on.

 Pat

 --
 Pat Riehecky
 Scientific Linux Developer