Linux · Security advisory · May 9, 2023
ALSA-2023:2256: Security update for 4 packages
ALSA-2023:2256, released May 9, 2023, fixes 22 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
22
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.3482
98th percentile
Priority of the 22 CVEs
Patch now 0
Urgent 0
High 16
Routine 6
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| webkit2gtk3 | almalinux 9 | 2.38.5-1.el9 |
| webkit2gtk3-devel | almalinux 9 | 2.38.5-1.el9 |
| webkit2gtk3-jsc | almalinux 9 | 2.38.5-1.el9 |
| webkit2gtk3-jsc-devel | almalinux 9 | 2.38.5-1.el9 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-42867 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.3482 | None reported | |
| High | CVE-2022-32886 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0187 | None reported | |
| High | CVE-2022-42823 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0183 | None reported | |
| High | CVE-2022-46691 | gir1.2-javascriptcoregtk-4.0: A memory consumption issue was addressed with improved memory handling | 8.8 | 0.0162 | None reported | |
| High | CVE-2022-32888 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0154 | None reported | |
| High | CVE-2022-46700 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0132 | None reported | |
| High | CVE-2022-46699 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0130 | None reported | |
| High | CVE-2022-42863 | webkit2gtk3-devel: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0124 | None reported | |
| High | CVE-2023-25358 | webkit2gtk: A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execu... | 8.8 | 0.0106 | None reported | |
| High | CVE-2023-25360 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | None reported | |
| High | CVE-2023-25361 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | None reported | |
| High | CVE-2023-25362 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | None reported | |
| High | CVE-2023-25363 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0097 | None reported | |
| High | CVE-2023-23517 | webkit2gtk3-jsc: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0090 | None reported | |
| High | CVE-2023-23518 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 8.8 | 0.0090 | None reported | |
| High | CVE-2022-42826 | libjavascriptcoregtk-4.0-18: A use after free issue was addressed with improved memory management | 8.8 | 0.0077 | None reported | |
| Routine | CVE-2022-42799 | gir1.2-javascriptcoregtk-4.0: The issue was addressed with improved UI handling | 6.1 | 0.0167 | None reported | |
| Routine | CVE-2022-32923 | libwebkit2gtk-4.1-0: A correctness issue in the JIT was addressed with improved checks | 6.5 | 0.0116 | None reported | |
| Routine | CVE-2022-42852 | gir1.2-javascriptcoregtk-4.0: The issue was addressed with improved memory handling | 6.5 | 0.0104 | None reported | |
| Routine | CVE-2022-46698 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 6.5 | 0.0100 | None reported | |
| Routine | CVE-2022-42824 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 5.5 | 0.0036 | None reported | |
| Routine | CVE-2022-46692 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgt... | 5.5 | 0.0021 | None reported |
Showing 1 to 22 of 22
1