Apache Vulnerabilities

[Mastadamus]

Are you guys tracking these vulnerabilities being exploited on Apache 2.4.x servers in the wild?

https://httpd.apache.org/security/vulnerabilities_24.html

[murgero]

@mastadamus Looks like that only affects alias directories.

[robi]

My vote is to stop using apache everywhere in favor of modern alternatives, yet the Cloudron architecture contains most exploits to the app container itself, and carries a low level of threat to other apps or the underlying system.

[murgero]

@robi I mean maybe im outta the loop, but how is apache not modern?

[robi]

@murgero Architecture, decades of A-patching..

https://www.nginx.com/blog/nginx-vs-apache-our-view/

[d19dotca]

A little unrelated but to the conversation of Apache vs Nginx… it would be a nice idea to have a LEMP stack app too instead of only LAMP.

[murgero]

@d19dotca I agree. Would be lovely!