ALAS2-2026-3892: CVEs fixed (Amazon Linux)

ALAS2-2026-3892 fixes 3 tracked CVEs. Affected systems and fixed versions.

CVE-2026-32327 CRITICAL 9.1 UPGRADE A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer whi
CVE-2026-34501 HIGH 7.5 UPGRADE Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects
CVE-2026-34502 HIGH 7.5 UPGRADE Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affec

Applies to