Apache 2.4 upgrade ?

[cdm]

We've been asked to upgrade Mediawiki's Apache 2.4.x  to   2.4.46 due to vulnerabilities.  Is it possible to upgrade Apache like that ?

Or do we just upgrade Mediawiki ?  Not sure what the lift factor is for that though.

 

Thanks,

Chris

[Skizzerz]

If you're already on Apache 2.4.x, upgrading it to a later version of 2.4.x shouldn't introduce any issues with upstream applications. There should be nothing you need to do for your wiki, just upgrade apache. (that said, you should also endeavor to keep the rest of your tech stack up to date, which means updating mysql, mediawiki, your server's kernel, etc. as things come in)

[cdm]

Thanks Skizzerz. We're on Mediawiki 1.30.    And don't know what the intra-version dependencies are between MySql, PHP and Mediawiki are.  But thanks for your feedback.

[Skizzerz]

MediaWiki 1.30 went end of life a year and a half ago (June 2019), and is no longer receiving any security or maintenance updates. You should definitely upgrade that wiki if it is exposed to the internet in any fashion. See Version lifecycle for more information on MediaWiki EOL dates.

For PHP and MySQL versions, check the Compatibility page

The general recommendation is to install the dependencies (apache, PHP, mysql) via your distribution's package manager and then keep them updated via said package manager on a regular basis. MediaWiki remains compatible with the older versions present in package managers from e.g. Debian stable for quite some time. Unless you are doing a very exotic setup (or if you're on Windows) there's generally no need to install the underlying dependencies manually.

Edited February 5, 2021 by Skizzerz
correct date (see edit history)

[cdm]

Our wiki is not exposed to the Internet.  I think I'm just going to try and upgrade (for now) the Apache 2.4.x to 2.4.46 with the yum package manager.

Thanks much for the links - the version lifecycle and the compatibility page. 

Thanks a lot for your insight and help Skizzerz.  Makes me feel better it might actually work !   :)