Q:

What to update to keep the server secured?

I've been asked to specify which updates are needed to update our server and  have it secured - problem is I'm not an expert on this.
I know that we've very old software. For my work I need PHP 7.2 and mySQL 5.5+, but don't know what else to check. I know we're running on:

Centos 6.5
Linux 2.6.32-573.12.1.el6.x86_64
Apache/2.2.15

Do any of these things need to be updated? To which version?
Do we need to check anything else?
Cheers.

A:

First step: Update to CentOS 6.10 plus any subsequent updated packages.  v6.5 is really old now (5+ years...). This should also take care of the Kernel and any system services like Apache and MySQL if you used the default packages. 
If you have installed PHP7 or other stuff via 3rd party means, make sure this is updated as well. 

