ALAS2-2023-1983: CVEs fixed (Amazon Linux)

ALAS2-2023-1983 fixes 6 tracked CVEs. Affected systems and fixed versions.

CVE-2023-25734 HIGH 8.1 UPGRADE UPGRADE After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a r
CVE-2023-25732 HIGH 8.8 UPGRADE UPGRADE When encoding data from an <code>inputStream</code> in <code>xpcom</code> the size of the input being encoded
CVE-2023-25735 HIGH 8.8 UPGRADE UPGRADE Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be s
CVE-2023-25737 HIGH 8.8 UPGRADE UPGRADE An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behav
CVE-2023-25739 HIGH 8.8 UPGRADE UPGRADE Module load requests that failed were not being checked as to whether or not they were cancelled causing a use
CVE-2023-25746 HIGH 8.8 UPGRADE UPGRADE Memory safety bugs present in Firefox ESR 102.7

Applies to