Whether you're taking your first steps with Kubernetes or you're an experienced practitioner looking to sharpen your skills, our Amazon EKS workshop series delivers practical, real-world experience that moves you forward. Learn directly from AWS solutions architects and EKS specialists through hands-on sessions designed to build your confidence with Kubernetes. Register now and start building with Amazon EKS!
Apache and OpenSSL running on its EC2 instances bundled with RedHat Linux 8 are outdated, how to best resolve this
As part of the System Penetration results, customer was advised that the versions of Apache and OpenSSL running on its EC2 instances bundled with RedHat Linux 8 are outdated and need to be updated to the latest version as they are vulnerable to several security vulnerabilities that might lead to system compromise according to penetration test outcomes. However, customer's Managed Service Partner advised that these versions that come with RedHat package updates are the latest ones that are compatible with the version of RedHat Kernel, and it would not be a good idea to manually upgrade these to the mainstream versions.
The customer would like to know the best way to resolve this issue?
- Language
- English
- Newest
- Most votes
- Most comments
I would snapshot the existing instance, spin up a new instance with that snapshot, and then upgrade the packages. Then test.
If you are behind a ALB, you could create a canary with the updated package and use weighted target groups to send a small amount of traffic to the canary.
Relevant content
- asked 2 years ago
- asked a year ago
- AWS OFFICIALUpdated 3 months ago
