I'm running a Debian web server. Though the packages are up-to-date, current vulnerability detection software (for instance Nessus) found several potential security risks that exist in the software provided by these packages -- my greatest concerns being Apache and PHP.
I'm planning to work around this by compiling them myself from source, but I'm not really sure about the steps I should take first. Should I uninstall Apache/PHP packages before installing from source? What about their dependencies?