# Updating packages to address vulnerabilities

**URL:** <https://talk.openmrs.org/t/updating-packages-to-address-vulnerabilities/37524>\
**Category:** Bahmni\
**Tags:** postgresql, apache, centos, bahmni\
**Created:** [September 14, 2022, 10:41am UTC](https://talk.openmrs.org/t/updating-packages-to-address-vulnerabilities/37524 "2022-09-14T10:41:42Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tapologo](https://talk.openmrs.org/letter_avatar/tapologo/32/5_5575768a8748004e209b776fc1b2916d.png) [@tapologo](https://talk.openmrs.org/u/tapologo)\
**Post date:** [September 14, 2022, 10:41am UTC](https://talk.openmrs.org/t/updating-packages-to-address-vulnerabilities/37524/1 "2022-09-14T10:41:42Z")

</div>

Hello community

What is the best approach of dealing with and addressing vulnerabilities without breaking/affecting system functionality. Our security team recently ran a vulnerability scan on our Bahmni installation and a lot of issues (CVEs) were picked. These were mostly to do with apache, postgres and OpenSSH. An update of these packages would obviously fix some of these issues but I am concerned that this would most likely break system functionality. Below are the package versions which are currently installed and which I intend to update (yum update).

- PostgreSQL - 9.6.15
- Apache - 2.4.6
- OpenSSH\_7.4p1, OpenSSL 1.0.2k-fips

Would running `yum update` for these packages cause issues with the application. We are on OpenMRS 0.92 and Centos 7.6.1810