Linux · Ubuntu · Package update · December 5, 2025

apache2-data 2.4.29-1ubuntu4.27+esm7: apache2-data 2.4.29-1ubuntu4.27+esm7 for Ubuntu 18.04.6 LTS (bionic)

apache2-data 2.4.29-1ubuntu4.27+esm7, released December 5, 2025, fixes 6 CVEs in apache2-data. None of them is reported as exploited. Patch Radar priority: High. The product is no longer supported.

HighUnsupported product
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.3545
98th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
apache2-dataUbuntu 18.04.6 LTS (bionic)2.4.29-1ubuntu4.27+esm7

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-39573 Apache: Multiple issues existed in Apache9.8 0.3545 None reported
High CVE-2024-38473 apache2: This update for apache2 fixes the following issues: - CVE-2024-38474: Fixed substitution encoding issue in mod_rewri...9.8 0.2588 None reported
High CVE-2023-45802 apache2: This update for apache2 fixes the following issues: - CVE-2023-45802: Fixed regression with previous fix (bsc#1233165).7.5 0.0317 None reported
High CVE-2025-58098 Apache HTTP Server: Server Side Includes adds query string to #exec cmd=...8.3 0.0153 None reported
High CVE-2025-65082 Apache HTTP Server: CGI environment variable override7.5 0.0087 None reported
High CVE-2025-66200 Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo7.5 0.0070 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.