ALAS2023-2025-1203: CVEs fixed (Amazon Linux)

ALAS2023-2025-1203 fixes 5 tracked CVEs. Affected systems and fixed versions.

CVE-2025-10532 MEDIUM 6.5 UPGRADE UPGRADE Incorrect boundary conditions in the JavaScript: GC component
CVE-2025-10533 HIGH 8.8 UPGRADE UPGRADE Integer overflow in the SVG component
CVE-2025-10528 HIGH 7.3 UPGRADE UPGRADE Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
CVE-2025-10537 HIGH 8.8 UPGRADE UPGRADE Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
CVE-2025-10529 MEDIUM 6.5 UPGRADE UPGRADE Same-origin policy bypass in the Layout component

Applies to