# RHSA-2023:2256: Security update for 4 packages RHSA-2023:2256, released May 9, 2023, fixes 23 CVEs across 4 products. One of them is being exploited (CVE-2022-48503); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/rhsa-2023-2256 - Platform: Linux - Released: May 9, 2023 - Priority: Patch now (Closes CVE-2022-48503, exploited (CISA KEV)) - CVEs: 23, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://access.redhat.com/errata/RHSA-2023:2256 ## Applies to | Product | Release | Fixed in | |---|---|---| | [webkit2gtk3](https://patchblox.com/security/data/product/linux/webkit2gtk3.md) | RHEL 9 | 0:2.38.5-1.el9 | | [webkit2gtk3-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-devel.md) | RHEL 9 | 0:2.38.5-1.el9 | | [webkit2gtk3-jsc](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc.md) | RHEL 9 | 0:2.38.5-1.el9 | | [webkit2gtk3-jsc-devel](https://patchblox.com/security/data/product/linux/webkit2gtk3-jsc-devel.md) | RHEL 9 | 0:2.38.5-1.el9 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-48503](https://patchblox.com/security/data/cve/CVE-2022-48503.md) | Patch now | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0321 | CISA KEV | | [CVE-2022-42867](https://patchblox.com/security/data/cve/CVE-2022-42867.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.3482 | | | [CVE-2022-32886](https://patchblox.com/security/data/cve/CVE-2022-32886.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0187 | | | [CVE-2022-42823](https://patchblox.com/security/data/cve/CVE-2022-42823.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0183 | | | [CVE-2022-46691](https://patchblox.com/security/data/cve/CVE-2022-46691.md) | High | gir1.2-javascriptcoregtk-4.0: A memory consumption issue was addressed with improved memory handling | 8.8 | 0.0162 | | | [CVE-2022-32888](https://patchblox.com/security/data/cve/CVE-2022-32888.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0154 | | | [CVE-2022-46700](https://patchblox.com/security/data/cve/CVE-2022-46700.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0132 | | | [CVE-2022-46699](https://patchblox.com/security/data/cve/CVE-2022-46699.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0130 | | | [CVE-2022-42863](https://patchblox.com/security/data/cve/CVE-2022-42863.md) | High | webkit2gtk3-devel: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0124 | | | [CVE-2023-25358](https://patchblox.com/security/data/cve/CVE-2023-25358.md) | High | webkit2gtk: A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execu... | 8.8 | 0.0106 | | | [CVE-2023-25360](https://patchblox.com/security/data/cve/CVE-2023-25360.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | | | [CVE-2023-25361](https://patchblox.com/security/data/cve/CVE-2023-25361.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | | | [CVE-2023-25362](https://patchblox.com/security/data/cve/CVE-2023-25362.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | | | [CVE-2023-25363](https://patchblox.com/security/data/cve/CVE-2023-25363.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | | | [CVE-2023-23517](https://patchblox.com/security/data/cve/CVE-2023-23517.md) | High | webkit2gtk3-jsc: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0090 | | | [CVE-2023-23518](https://patchblox.com/security/data/cve/CVE-2023-23518.md) | High | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0090 | | | [CVE-2022-42826](https://patchblox.com/security/data/cve/CVE-2022-42826.md) | High | libjavascriptcoregtk-4.0-18: A use after free issue was addressed with improved memory management | 8.8 | 0.0077 | | | [CVE-2022-42799](https://patchblox.com/security/data/cve/CVE-2022-42799.md) | Routine | gir1.2-javascriptcoregtk-4.0: The issue was addressed with improved UI handling | 6.1 | 0.0167 | | | [CVE-2022-32923](https://patchblox.com/security/data/cve/CVE-2022-32923.md) | Routine | libwebkit2gtk-4.1-0: A correctness issue in the JIT was addressed with improved checks | 6.5 | 0.0116 | | | [CVE-2022-42852](https://patchblox.com/security/data/cve/CVE-2022-42852.md) | Routine | gir1.2-javascriptcoregtk-4.0: The issue was addressed with improved memory handling | 6.5 | 0.0104 | | | [CVE-2022-46698](https://patchblox.com/security/data/cve/CVE-2022-46698.md) | Routine | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 6.5 | 0.0100 | | | [CVE-2022-42824](https://patchblox.com/security/data/cve/CVE-2022-42824.md) | Routine | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 5.5 | 0.0036 | | | [CVE-2022-46692](https://patchblox.com/security/data/cve/CVE-2022-46692.md) | Routine | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 5.5 | 0.0021 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo