We have detected 15 vulnerabilities in the Apache server on Debian. Although they are not being actively exploited, it is recommended to update to stay protected. If your website is on a server managed by us, we are already working to apply the patch. If you manage the server yourself, follow the instructions below.
What happened, explained simply
Apache is a program that helps your website work, like an engine that makes pages load. In this case, Apache is installed on the Debian operating system, which is like the "computer" where your website lives.
15 errors (with CVE codes) have been found in Apache that could allow someone to take advantage of your website if not fixed. These errors are considered critical (CVSS 9.8), which means it's important to act.
Why it's important
If your website is not updated, there could be risks such as:
- Unauthorized access to your website's data.
- Possible server crash if someone tries to exploit the error.
Although there are no signs that these errors are currently being used, it's better to be prepared.
Does it affect me?
These vulnerabilities affect versions prior to the fixed one: 13:2.4.69-1~deb13u1. If your website is using an older version, it is recommended to update.
To check the Apache version you have installed, you can:
- Access your server via SSH and run the command
apache2 -v. - Or, check the Security section in SWPanel, where you will see if your website is affected.
What SWPanel does
Our security team has detected these vulnerabilities by analyzing managed websites. If your website is on a server managed by us, we are already updating the package to the fixed version. If your website is on a server you manage yourself, you will need to update it.
What you need to do
If you manage the server yourself, follow these steps:
- Make a backup of your website and database. This is important in case something goes wrong.
- Update the
apache2package to version13:2.4.69-1~deb13u1or higher. You can do this from the Debian system using commands likeapt update && apt upgrade. - Restart the Apache service to apply the changes.
- Check that your website works properly after the update.
- Re-analyze your website in the Security section of SWPanel to confirm it is no longer affected.
Frequently asked questions
Do I have to pay anything?
No. This update is free.
How do I know if I'm protected?
When your website is using version 13:2.4.69-1~deb13u1 or higher. You can check this with the command apache2 -v or by reviewing the Security section in SWPanel.
What if I don't know how to update it?
You can open a support ticket from SWPanel and we will help you.
Can my website break after the update?
We always recommend making a backup before updating. That way, if something goes wrong, you can restore your website.
Need help?
If you have questions or need technical support, open a support ticket from the SWPanel customer area. We're here to help you.
