ALAS2-2025-3108: CVEs fixed (Amazon Linux)

ALAS2-2025-3108 fixes 6 tracked CVEs. Affected systems and fixed versions.

CVE-2025-13014 HIGH 8.8 UPGRADE Use-after-free in the Audio/Video component
CVE-2025-13020 HIGH 8.8 UPGRADE Use-after-free in the WebRTC: Audio/Video component
CVE-2025-13016 HIGH 7.5 UPGRADE Incorrect boundary conditions in the JavaScript: WebAssembly component
CVE-2025-13017 HIGH 8.1 UPGRADE Same-origin policy bypass in the DOM: Notifications component
CVE-2025-13018 HIGH 8.1 UPGRADE Mitigation bypass in the DOM: Security component
CVE-2025-13019 HIGH 8.1 UPGRADE Same-origin policy bypass in the DOM: Workers component

Applies to