Alpine/apache2: critical 9.8

Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...})

Action: Upgrade apache2 to 2.4.69-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2026-56154#Alpine:v3.24/apache2
• https://security.alpinelinux.org/vuln/CVE-2026-56154

published 2026-10-01T17:17:26.610Z · modified 2026-10-03T06:30:02.533829741Z · JSON