ALAS2022-2022-036

Amazon Linux 2022 Security Advisory: ALAS-2022-036
Advisory Release Date: 2022-03-07 23:57 Pacific
Advisory Updated Date: 2022-03-10 00:15 Pacific
Severity: Critical
Issue Overview:

An integer overflow was found in expat. The issue occurs in storeRawNames() by abusing the m_buffer expansion logic to allow allocations very close to INT_MAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution. (CVE-2022-25315)


Affected Packages:

expat


Issue Correction:
Run dnf update --releasever=2022.0.20220308 expat to update your system.

New Packages:
aarch64:
    expat-debuginfo-2.4.6-1.amzn2022.aarch64
    expat-debugsource-2.4.6-1.amzn2022.aarch64
    expat-static-2.4.6-1.amzn2022.aarch64
    expat-2.4.6-1.amzn2022.aarch64
    expat-devel-2.4.6-1.amzn2022.aarch64

src:
    expat-2.4.6-1.amzn2022.src

x86_64:
    expat-debuginfo-2.4.6-1.amzn2022.x86_64
    expat-debugsource-2.4.6-1.amzn2022.x86_64
    expat-devel-2.4.6-1.amzn2022.x86_64
    expat-2.4.6-1.amzn2022.x86_64
    expat-static-2.4.6-1.amzn2022.x86_64

Additional References

Red Hat: CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, CVE-2022-25315

Mitre: CVE-2022-25235, CVE-2022-25236, CVE-2022-25313, CVE-2022-25314, CVE-2022-25315