I am currently using apache old version (2.4.51), does it affect security?

Hello,

Unfortunately AWS is sometimes slow on updating it's package repository with the latest versions (I have already seen that a couple of times). Therefore if you want to stick with using the official Amazon Linux Package repository, you have to wait for AWS to release the new Apache version.

To see the latest packages updates you can follow https://alas.aws.amazon.com/alas2.html

I have also asked a similar question to obtain some specific timelines regarding that: https://repost.aws/questions/QUNyOLk0grTS2rBWnth69laA/amazon-linux-2-apache-package-version-update

For questions or concerns about security in Amazon Linux or any AWS service, please reach out to our security contact: aws-security@amazon.com