How difficult would it be to upgrade your version of Apache within the WebGUI Runtime Environment, leaving all else the same? I presume we're not going to get a WRE update until WG8 comes out, and the version of Apache in the latest WRE (2.2.11) is getting a little long in the tooth. Because of the recent DoS vulnerability, Apache released 2.2.20, and then soon after 2.2.21 (which is supposed to use less memory than the 2.2.20 solution).

I understand that there are patches you can apply using rewrite rules to deal with the DoS vulnerability, but there are also other vulnerabilities patched since 2.2.11, and it would seem that upgrading to the latest patched version would be preferable.

https://www.apache.org/dist/httpd/Announcement2.2.html

http://httpd.apache.org/security/CVE-2011-3192.txt

--- (Edited on 2011-09-17 6:42 pm [GMT-0500] by Trex) ---