WebFaction
Community site: login faq

Hi,

I'd always (perhaps naively) thought that the embedded httpd binary certain webapps (e.g. django) have (e.g. ~/webapps/xyz/apache2/bin/httpd) was webfaction's responsibility to keep security updated (perhaps with some automagic script they have), seeing as we're not really even told much about it on installation.

But looking at one of mine closer today I note it hasn't been modified for almost a year.

So am I supposed to be worrying about this myself? If so, is there a recommended path to updating the httpd binary? Installing a new dummy webapp and copying across the binaries (including the modules)?

asked 07 Mar '13, 10:20

ris
514
accept rate: 0%


Hello,

In general, it is up to you to keep your binaries secure and up-to-date, even if they originated from a WebFaction installer. There have been times in the past when a security vulnerability was discovered in Django (or some other web app) and we went ahead and automatically upgraded all of the affected binaries as a convenience for our customers, but this is not something you should rely on. The security of any sites or binaries located in your home directory is your own responsibility.

There are several ways you can update your binaries, depending on which type of webapp we are talking about. In the case of Django, you can take a look at these instructions for upgrading your Django Python libraries:

http://docs.webfaction.com/software/django/config.html#upgrading-your-django-libraries

Also, the method you mentioned would work for upgrading your Apache binaries (install a new app from the Control Panel, copy over the binaries and modules).

permanent link

answered 07 Mar '13, 11:08

likebike
3366
accept rate: 28%

edited 07 Mar '13, 11:11

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×69
×25
×4

question asked: 07 Mar '13, 10:20

question was seen: 2,063 times

last updated: 07 Mar '13, 11:11

WEBFACTION
REACH US
SUPPORT
AFFILIATE PROGRAM
LEGAL
© COPYRIGHT 2003-2020 SWARMA LIMITED - WEBFACTION IS A SERVICE OF SWARMA LIMITED
REGISTERED IN ENGLAND AND WALES 5729350 - VAT REGISTRATION NUMBER 877397162
5TH FLOOR, THE OLD VINYL FACTORY, HAYES, UB3 1HA, UNITED KINGDOM