USN-4307-1
apache2 update
As a security improvement, this update adds TLSv1.3 support to the Apache HTTP Server package in Ubuntu 18.04 LTS.
TLSv1.3 is enabled by default, and in certain environments may cause compatibility issues. The SSLProtocol directive may be used to disable TLSv1.3 in these problematic environments.
What each source reports
OSV No score
apache2 update
As a security improvement, this update adds TLSv1.3 support to the Apache HTTP Server package in Ubuntu 18.04 LTS.
TLSv1.3 is enabled by default, and in certain environments may cause compatibility issues. The SSLProtocol directive may be used to disable TLSv1.3 in these problematic environments.
- Record
USN-4307-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Ubuntu:18.04:LTS |
before 2.4.29-1ubuntu4.13, plus listed versions 2.4.27-2ubuntu32.4.29-1ubuntu12.4.29-1ubuntu22.4.29-1ubuntu32.4.29-1ubuntu4 Show 11 moreShow less2.4.29-1ubuntu4.12.4.29-1ubuntu4.22.4.29-1ubuntu4.32.4.29-1ubuntu4.42.4.29-1ubuntu4.52.4.29-1ubuntu4.62.4.29-1ubuntu4.72.4.29-1ubuntu4.82.4.29-1ubuntu4.102.4.29-1ubuntu4.112.4.29-1ubuntu4.12 |
2.4.29-1ubuntu4.13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-4307-1 is a vulnerability with no CVSS score yet in apache2, published March 18, 2020. No source lists public exploit code. Fixed in apache2 2.4.29-1ubuntu4.13.