ALAS2023-2024-656: CVEs fixed (Amazon Linux)

ALAS2023-2024-656 fixes 3 tracked CVEs. Affected systems and fixed versions.

CVE-2024-38476 CRITICAL 9.8 UPGRADE MITIGATE Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF
CVE-2024-38475 CRITICAL 9.1 EXPLOITED UPGRADE MITIGATE Apache HTTP Server Improper Escaping of Output Vulnerability
CVE-2024-38474 CRITICAL 9.8 UPGRADE MITIGATE Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute

Applies to