remediating vulnerabilities

[rodill]

My scanning team keeps finding vulnerabilities on Expedition and keep requesting I patch them. They all seem to be related to Linux not Expedition itself. I know that I can't upgrade the version of Ubuntu that it runs on. Suggestions? 

list of some of the vulnerabilities

Apache

CVE-2017-15715

CVE-2016-8743

CVE-2019-0211

CVE-2018-1333

CVE-2016-2161

CVE-2016-8740

CVE-2016-5387

CVE-2017-15710

CVE-2016-0736

CVE-2018-1303

CVE-2016-4979

CVE-2017-9798

CVE-2019-0217

CVE-2018-17199

[azuniga]

Hello @rodill 

Update your apache2 service to patch these vulnerabilities. The latest version of apache2 is running on 2.4.46 so I used that in this example and after you restart apache2 it should be reachable, and please back up the VM if for any event you have problems after the upgrade.

sudo add-apt-repo ppa:ondrej/apache2
sudo apt-get install apache2=2.4.46-2+ubuntu16.04.1+deb.sury.org+3
apache2 -v (it is now on the latest)
sudo service apache2 restart

[rodill]

thanks for the suggestions. The first command doesn't comeback as a valid command. The expedition is just as Palo supplied it if that matters in this instance. I run the version check and I get this

Server version: Apache/2.4.18 (Ubuntu)
Server built: 2020-08-12T21:35:50

[azuniga]

Hello @rodill 

The first command is reaching out to a remote repository please make sure if you are running a proxy it has access to communicate with it. The Apache Version is 2.4.18 so when you run what I suggested then you should now be on 2.4.46 when you run the version check.

[rodill]

thanks to your suggestions I found I needed to run this

sudo add-apt-repository ppa:ondrej/apache2
sudo apt update
sudo apt upgrade
sudo apt-get dist-upgrade

this did the trick for me on the upgrade, will wait on the scanning team, thanks again