UBUNTU 16.04 ELS: apache2 package with the fixes for CVE-2021-30641, CVE-2021-26691, CVE-2021-26690, CVE-2020-35452 released - TuxCare

Check the status of CVEs. Learn More.

 CVE Status (opens in new tab)

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Go straight to an AI summary of this blog post instead

  • Summarize this post with Perplexity
  • Summarize this post with Gemini

A new updated apache2 package with the fixes for CVE-2021-30641, CVE-2021-26691, CVE-2021-26690, CVE-2020-35452 within Ubuntu 16.04 ELS is now available for download from our production repository.

CHANGELOG

apache2-2.4.18-2ubuntu3.18

  • Fix unexpected URL matching with ‘MergeSlashes OFF’ (CVE-2021-30641)
  • Fix heap overflow in mod_session (CVE-2021-26691)
  • Fix NULL pointer dereference in mod_session (CVE-2021-26690)
  • Fix mod_auth_digest possible stack overflow by one null byte (CVE-2020-35452)

UPDATE COMMAND

apt-get update
apt-get --only-upgrade install apache2*

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.

Table of Contents
Get the open-source security answers you need
Ask Us a Question

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.