ALAS2023-2026-3202: CVEs fixed (Amazon Linux)

ALAS2023-2026-3202 fixes 3 tracked CVEs. Affected systems and fixed versions.

CVE-2026-56154 CRITICAL 9.8 UPGRADE Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) Th
CVE-2026-57941 CRITICAL 9.8 UPGRADE Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This i
CVE-2026-59797 CRITICAL 9.8 UPGRADE Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related ex

Applies to