Is your Apache HTTP Server affected by CVE-2021-41773?
Am I affected?
If you run Apache HTTP Server below the fixed release for your branch, update it.
- Release lines with an official fixed release: 1 of 1. 1 of them not yet confirmed by a second official source.
- Linux packages and images with the fix: 6 of 15.
Runs in your browser. Nothing is sent.
Fixed upstream
| Branch | Fixed in | Released | State |
|---|---|---|---|
| 2.4 | 2.4.50 | UnconfirmedOne official source so far |
Linux packages and images
6 of 15 tracked Linux packages and images have the fix.
All fixed versions| Distribution | Fixed | Waiting | Unconfirmed | State |
|---|---|---|---|---|
| Debian | 4 / 4 | 0 | 0 | Fixed |
| Ubuntu | 5 / 5 | 0 | 0 | Fixed |
| Alpine Linux | 2 / 2 | 0 | 0 | Fixed |
| Red Hat Enterprise Linux | 4 / 4 | 0 | 0 | Fixed |
Confirm it worked
-
Find the version you run. Use the command, or read it in your hosting control panel.
Compare it with the row for your own release line or distro above. Only compare a distro package with that distro's own row.
Or paste it into the checker. It runs in your browser and sends nothing.
Questions people ask
My server shows an older version number than the fixed one. Am I still exposed?
Not necessarily. Linux distributions fix a problem inside their own package and keep their own numbering. Read the row for your distribution and release in the table, not the upstream number.
What does "One official source so far" mean?
PatchBell publishes a fixed state when two independent official sources agree, or when the project's own security advisory or release notes state it. A row backed by a single other source stays unconfirmed until a second one confirms it.
Does PatchBell scan my server?
No. Nothing here contacts your server or your site. The checker compares what you paste with the published data in your browser.
My hosting provider is not listed. What now?
Ask the provider which version your plan runs, then compare it with the table. A missing provider means PatchBell has no official statement from it, not that the plan is fixed.