从apache网站,最新版本似乎是2.4.54。
我在我的 CentOS 7 上安装了 apache,当我检查版本时,它显示它安装了最新版本,但版本号是httpd-2.4.6-97.el7.centos.5.x86_64
:
# yum changelog httpd
Failed to set locale, defaulting to C
Loaded plugins: changelog, fastestmirror
Loading mirror speeds from cached hostfile
* base: centos.interhost.net.il
* extras: centos.interhost.net.il
* updates: centos.interhost.net.il
Listing all changelogs
==================== Installed Packages ====================
httpd-2.4.6-97.el7.centos.5.x86_64 installed
* Thu Mar 24 14:00:00 2022 CentOS Sources <[email protected]> - 2.4.6-97.el7.centos.5
- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases
* Tue Mar 22 14:00:00 2022 Lubo? Uhliarik <[email protected]> - 2.4.6-97.5
- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlier
我收到报告说该站点存在安全漏洞,应该在以前版本的 Apache 中修复,所以我不明白如果我有最新版本为什么会有这个漏洞。
有人可以解释为什么会这样吗?