RHSA-2022:0850: CVEs fixed (Red Hat)

RHSA-2022:0850 fixes 4 tracked CVEs. Affected systems and fixed versions.

• CVE-2022-25315 CRITICAL 9.8 UPGRADE MITIGATE In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
• CVE-2022-25236 CRITICAL 9.8 UPGRADE MITIGATE xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into
• CVE-2022-26485 HIGH 8.8 EXPLOITED UPGRADE UPGRADE Mozilla Firefox Use-After-Free Vulnerability
• CVE-2022-26486 CRITICAL 9.6 EXPLOITED UPGRADE UPGRADE Mozilla Firefox Use-After-Free Vulnerability

Applies to

• RHEL 7 · fixed in thunderbird-91.7.0-2.el7_9

← Back to latest CVEs