cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 

Community Tip - If community subscription notifications are filling up your inbox you can set up a daily digest and get all your notifications in a single email. X

WCH 11.1 M020 and Apache upgrade

Alberto
10-Marble

WCH 11.1 M020 and Apache upgrade

I am using Windchill PDMLink Release 11.1 and Datecode with CPS M020-CPS13

Hello,
we have WCH 11.1 M020 CPS13 and we must solve the security hole regarding Apache HTTP server module.
Do you have suggest to me?
With the lasp CPS updgade for M020, Ca i solve the issue?

Thanks
4 REPLIES 4
avillanueva
22-Sapphire II
(To:Alberto)

With an out of support Windchill version (ended Jan 2023) (PTC Support Calendar) the right solution is to plan an upgrade to the latest version of Windchill. You might need a two step upgrade to get there. Other than that, my suggestion is that you install your own Apache webserver and copy the configurations over to it. This means you stop using the Windchill supplied Apache instance and use your own which you can patch and upgrade as needed. However, this also means any PTC supplied scripts for ant and reconfigurations will not work without modifications. 

Hello.
for the moment we cannot upgrade our Windchill version because it has some connectors with other external application.
This is plan for the middle of next year after all necessary test.
In this moment we must solve this security issue to be complaint with the new normative NSI2.
Thanks
avillanueva
22-Sapphire II
(To:Alberto)

In this case, install a current version of Apache. You should be able to copy over the conf files to the similar areas. Change your startup scripts to run this new version and do not use the PTC supplied Apache server. That should do the trick.

I found this Article - CS386653 - Potential Impact of Apache HTTP Server (2.4 to 2.4.54) security vulnerability (CVE-2022-36760) in Windchill PDMLink & FlexPLM (ptc.com) and for the moment I prefe to apply only the patch in our WCH version.

Thx for your reply

Announcements


Top Tags