Is Apache HTTP Server 1.3.42 patched?

Apache · cycle 1.3 · end of life · Official site ↗

1.3.4220/100Critical · exploited

Current stable (2.4.69): 100/100

Minimum safe version2.4.69

1.3.42 has 5 open critical-or-high vulnerabilities. Run 2.4.69 or later to clear them. See what 2.4.69 fixes →

1 of the vulnerability affecting 1.3.42 is linked to ransomware campaigns (CISA KEV) — prioritise patching.

Health score20/100

Open issues6

Exploited now1

Cycle 1.3 EOL2010-02-03

Latest release2.4.69

Summary iPlain-English security status for Apache HTTP Server 1.3.42, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Apache HTTP Server 1.3.42 is part of the 1.3 release line. 1 actively-exploited vulnerability affects it (CISA KEV). 1 is linked to ransomware campaigns (CISA KEV). The minimum safe version is 2.4.69 — upgrade to it or later to clear the open critical/high issues. The 1.3 line reached end-of-life on 2010-02-03, so it no longer receives security patches. The latest supported Apache HTTP Server release is 2.4.69.

Known issues affecting 1.3.42

Exploited first, then by exploitation probability.

CVE-2021-40438 CRITICAL exploited ransomware EPSS 100% → see advisory CVE-2025-58098 HIGH EPSS 1% → fixed in 2.4.66 CVE-2026-28780 CRITICAL EPSS 1% → fixed in 2.4.67 CVE-2026-42535 CRITICAL EPSS 1% → fixed in 2.4.68 CVE-2026-29170 MEDIUM EPSS 1% → fixed in 2.4.68 CVE-2026-93546 HIGH EPSS 0% → fixed in 2.4.69

Other Apache HTTP Server versions

Check another release line of Apache HTTP Server.

Apache HTTP Server 2.4.69 Apache HTTP Server 2.2.34 Apache HTTP Server 2.0.65

Frequently asked

Is Apache HTTP Server 1.3.42 patched?

No — 1 actively-exploited vulnerability affects Apache HTTP Server 1.3.42. Upgrade to at least 2.4.69.

What version should I upgrade Apache HTTP Server 1.3.42 to?

Upgrade Apache HTTP Server 1.3.42 to at least 2.4.69 to clear its 5 open critical-or-high vulnerabilities.

When does Apache HTTP Server 1.3 reach end-of-life?

Apache HTTP Server 1.3 reached end-of-life on 2010-02-03 and no longer receives security patches.

What is the latest version of Apache HTTP Server?

The latest supported Apache HTTP Server release is 2.4.69.

Is Apache HTTP Server 1.3.42 still receiving security updates?

No — Apache HTTP Server 1.3.42 is on the 1.3 line, which reached end-of-life on 2010-02-03 and no longer receives security updates. Upgrade to 2.4.69 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Apache's official advisory before you patch or upgrade — Apache HTTP Server official site ↗