# ELSA-2023-2256: Security update for 4 packages ELSA-2023-2256, released May 15, 2023, fixes 22 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2023-2256 - Platform: Linux - Released: May 15, 2023 - Priority: High (Closes CVE-2022-42867, high severity) - CVEs: 22, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2023-2256.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | ol 9 | 0:2.38.5-1.el9 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | ol 9 | 0:2.38.5-1.el9 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | ol 9 | 0:2.38.5-1.el9 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | ol 9 | 0:2.38.5-1.el9 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-42867](https://patchblox.com/security/data/cve/CVE-2022-42867.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.3482 | | | [CVE-2022-32886](https://patchblox.com/security/data/cve/CVE-2022-32886.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0187 | | | [CVE-2022-42823](https://patchblox.com/security/data/cve/CVE-2022-42823.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0183 | | | [CVE-2022-46691](https://patchblox.com/security/data/cve/CVE-2022-46691.md) | High | gir1.2-javascriptcoregtk-4.0: A memory consumption issue was addressed with improved memory handling | 8.8 | 0.0162 | | | [CVE-2022-32888](https://patchblox.com/security/data/cve/CVE-2022-32888.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0154 | | | [CVE-2022-46700](https://patchblox.com/security/data/cve/CVE-2022-46700.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0132 | | | [CVE-2022-46699](https://patchblox.com/security/data/cve/CVE-2022-46699.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0130 | | | [CVE-2022-42863](https://patchblox.com/security/data/cve/CVE-2022-42863.md) | High | webkit2gtk3-devel: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0124 | | | [CVE-2023-25358](https://patchblox.com/security/data/cve/CVE-2023-25358.md) | High | webkit2gtk: A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execu... | 8.8 | 0.0106 | | | [CVE-2023-25360](https://patchblox.com/security/data/cve/CVE-2023-25360.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | | | [CVE-2023-25361](https://patchblox.com/security/data/cve/CVE-2023-25361.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | | | [CVE-2023-25362](https://patchblox.com/security/data/cve/CVE-2023-25362.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | | | [CVE-2023-25363](https://patchblox.com/security/data/cve/CVE-2023-25363.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | | | [CVE-2023-23517](https://patchblox.com/security/data/cve/CVE-2023-23517.md) | High | webkit2gtk3-jsc: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0090 | | | [CVE-2023-23518](https://patchblox.com/security/data/cve/CVE-2023-23518.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0090 | | | [CVE-2022-42826](https://patchblox.com/security/data/cve/CVE-2022-42826.md) | High | libjavascriptcoregtk-4.0-18: A use after free issue was addressed with improved memory management | 8.8 | 0.0077 | | | [CVE-2022-42799](https://patchblox.com/security/data/cve/CVE-2022-42799.md) | Routine | gir1.2-javascriptcoregtk-4.0: The issue was addressed with improved UI handling | 6.1 | 0.0167 | | | [CVE-2022-32923](https://patchblox.com/security/data/cve/CVE-2022-32923.md) | Routine | libwebkit2gtk-4.1-0: A correctness issue in the JIT was addressed with improved checks | 6.5 | 0.0116 | | | [CVE-2022-42852](https://patchblox.com/security/data/cve/CVE-2022-42852.md) | Routine | gir1.2-javascriptcoregtk-4.0: The issue was addressed with improved memory handling | 6.5 | 0.0104 | | | [CVE-2022-46698](https://patchblox.com/security/data/cve/CVE-2022-46698.md) | Routine | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 6.5 | 0.0100 | | | [CVE-2022-42824](https://patchblox.com/security/data/cve/CVE-2022-42824.md) | Routine | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 5.5 | 0.0036 | | | [CVE-2022-46692](https://patchblox.com/security/data/cve/CVE-2022-46692.md) | Routine | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 5.5 | 0.0021 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo