Ubuntu Apache Security Update: Check USN-9016-1

After an Ubuntu Apache update, apache2 -v can show the same upstream version. The distribution may have applied a security fix to that branch and changed the package revision. Verify the Ubuntu release and the complete package version.

Which installation does USN-9016-1 cover?

Canonical's notice covers several Apache HTTP Server security issues. The affected scope and fixed revision vary by Ubuntu release. Find the package entry for the release running your server. For a source build, a third-party repository or a container, check the security information from the channel that supplies that build. Canonical security record

Compare the installed and candidate versions

cat /etc/os-release
dpkg-query -W apache2 apache2-bin apache2-data apache2-utils
apt-cache policy apache2 apache2-bin
sudo apache2ctl configtest

The first package query reports installed versions. apt-cache policy shows the available candidate and its origin. If the candidate lacks the expected revision, check package indexes, security repository configuration and any version pins. Include the revision of separately packaged modules where they are part of the installation.

Check the service and a real request

Package installation can refresh the running service. Check the configuration and review APT's proposed changes before proceeding. After the maintenance window, verify the service and configuration again.

systemctl is-active apache2
sudo apache2ctl configtest
sudo journalctl -u apache2 -n 30 --no-pager

Send a normal HTTPS request to the site you maintain. If a reverse proxy sits in front of Apache, run the internal health check as well. Record the package revision, service state and expected application response together. Apache control commands