I am trying to find out how to update the Message Relay application for our 2019 Windows server. The version of httpd.exe is apache 2.5.3 which appears on our Nessus Vulnerability reports. Sophos has released a kb documenting why their system is not vulnerable to the CVE posted.
However according this Sophos article https://support.sophos.com/support/s/article/KB-000038269?language=en_US
"The Message Relay feature is using the latest version of Apache 2.4.54 in Message Relay v126.96.36.199. This is released as part of Server Core Agent 2022.3.0.84.Note: Version 2022.3.0.84 wasn't released to all customers and has been replaced by version 2022.4.0.6, which is currently being released.
I've removed the Message Cache from my server via Sophos Central then later that day redeployed Update Cache/Message Relay however it is still installing the older version. How do I obtain the newer server core agent to update my server?
Thank you for reaching the community.You should be able to install the latest version of MR on your server after removing the old one. By any chance, do you have a controlled update turned on on your central? You may try to check under a controlled update and see if the version has been put on hold and let us know.
Our controlled update is turned off, MR still old v188.8.131.52 now.