ALAS2-2022-1779: CVEs fixed (Amazon Linux)

ALAS2-2022-1779 fixes 4 tracked CVEs. Affected systems and fixed versions.

CVE-2022-25315 CRITICAL 9.8 UPGRADE MITIGATE In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
CVE-2022-25236 CRITICAL 9.8 UPGRADE MITIGATE xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into
CVE-2022-26485 HIGH 8.8 EXPLOITED UPGRADE UPGRADE Mozilla Firefox Use-After-Free Vulnerability
CVE-2022-26486 CRITICAL 9.6 EXPLOITED UPGRADE UPGRADE Mozilla Firefox Use-After-Free Vulnerability

Applies to