Great question - and one which I know people rightly worry about.

System Sim's view is that you should be able to take all the routine 
updates from your operating system provider - and that includes Apache. 
There is always a chance that an update will break something but it is 
extremely rare these days and I can't remember it ever happening in the 
case of Apache.  This is how we run all our servers - the ones in our 
cloud hosting operation as well as our internal servers.  Our view is 
you can't risk running without a security update.

Very interested to hear other views and experiences from the sharp end!

Michael.

On 21/06/17 09:38, Sian Woodward wrote:
> Hello everyone,
> 
> Can anyone who has their CI+ or MI+ installed on a server and runs Apache Web server or equivalent for serving data to a website or through an API help us to understand what might be required to maintain, patch and update Apache, or outline how their set-up functions please? We're having some discussion with various service providers to ensure vulnerabilities are dealt with, and I want to work out whether people are talking at cross-purposes or how involved it is likely to be.
> 
> Best Wishes,
> 
> Sian Woodward
> 
> Collections Manager,
> Museum of Domestic Design & Architecture (MoDA)
> MoDA Collections Centre
> Middlesex University
> 9 Boulevard Drive, Beaufort Park
> London, NW9 5HF
>   
> +44 (0)208 411 4040
>   
> http://www.moda.mdx.ac.uk   
> 
>    @modamuseum
>    @MuseumOfDomesticDesignAndArchitecture
>    www.linkedin.com/company-beta/11124528
> 
> **********
> Please note that we retain email correspondence for monitoring and evaluation purposes, according to the terms of the General Data Protection Regulation (GDPR), 2018.  We do not keep data for longer than necessary and we never share your data with anyone else.  If at any point you would like us to remove your data from our records please let us know.
>   
> **********
> The Museum of Domestic Design and Architecture welcomes online donations.
>