ALAS2023-2026-1720: CVEs fixed (Amazon Linux)

ALAS2023-2026-1720 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2026-29168 HIGH 7.3 UPGRADE Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's  mod_md via OCSP re
• CVE-2026-29169 HIGH 7.5 UPGRADE A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to c

Applies to

• Amazon Linux 2023

← Back to latest CVEs