Apache HTTP Server 2.2.34 End of life
This release line no longer gets security fixes.
Upgrade to 2.4.69
The lowest fixed release that is still supported.
- Known vulnerabilities
- 25 (3 critical, 7 high)
- End of life
- Yes, since 2017-07-11
- Data as of
- 2026-10-24 18:07 UTC
Vulnerabilities
- CVE-2026-28780 critical
- CVE-2026-42535 critical
- CVE-2022-28615 critical
- CVE-2026-93546 high
- CVE-2026-24072 high
- CVE-2025-58098 high fixed in 2.4.66
- CVE-2026-34059 high
- CVE-2026-29169 high
- CVE-2025-49812 high
- CVE-2023-38709 high
And 15 more with lower severity.
- 4 Apache HTTP Server vulnerabilities are still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.