ALAS2023-2023-058: CVEs fixed (Amazon Linux)

ALAS2023-2023-058 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2022-25315 CRITICAL 9.8 UPGRADE MITIGATE In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
• CVE-2022-25236 CRITICAL 9.8 UPGRADE MITIGATE xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into

Applies to

• Amazon Linux 2023

← Back to latest CVEs