Skip to content

CVE-2021-41773: fixed versions by distro

Every tracked distribution release and image, with the package version that counts as fixed and the vendor's own page.

Last checked 23 Oct 2026 16:11 UTCLast changed 25 Oct 2026 06:26 UTC

Overall: Partly fixed
Severity: High7.5CVSS v3.1Red Hat
Last checked: 23 Oct 2026 16:11 UTC

Check your version

Debian

4 of 4 fixed

Debian
Release	Package	Fixed version	State	Verified	Source
forky(testing)	apache2	2.4.50-1	Fixed	25 Oct 2026 05:11 UTC	Source
sid(unstable)	apache2	2.4.50-1	Fixed	25 Oct 2026 05:11 UTC	Source
12(bookworm) security (LTS team)	apache2	2.4.50-1	Fixed	25 Oct 2026 05:11 UTC	Source
13(trixie) security	apache2	2.4.50-1	Fixed	25 Oct 2026 05:11 UTC	Source

Ubuntu

5 of 5 fixed

Ubuntu
Release	Package	Fixed version	State	Verified	Source
16.04 LTS(xenial)	apache2	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:11 UTC	Source
18.04 LTS(bionic)	apache2	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:11 UTC	Source
22.04 LTS(jammy)	apache2	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:11 UTC	Source
20.04 LTS(focal)	apache2	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:11 UTC	Source
14.04 LTS(trusty)	apache2	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:11 UTC	Source

Alpine Linux

2 of 2 fixed

Alpine Linux
Release	Package	Fixed version	State	Verified	Source
Alpine 3.24	apache2	2.4.50-r0	Fixed	25 Oct 2026 05:01 UTC	Source
edge(development)	apache2	2.4.50-r0	Fixed	25 Oct 2026 05:14 UTC	Source

Red Hat Enterprise Linux

4 of 4 fixed

Red Hat Enterprise Linux
Release	Package	Fixed version	State	Verified	Source
Red Hat Enterprise Linux 8	httpd:2.4/httpd	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:01 UTC	Source
Red Hat Enterprise Linux 7	httpd	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:01 UTC	Source
Red Hat Enterprise Linux 6	httpd	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:01 UTC	Source
Red Hat Enterprise Linux 9	httpd	No fixed version published yet	Not affectedVendor statement	25 Oct 2026 05:01 UTC	Source