Linux · Security advisory · May 17, 2022
ELSA-2022-1777: Security update for 4 packages
ELSA-2022-1777, released May 17, 2022, fixes 30 CVEs across 4 products. 2 of them are being exploited (CVE-2022-22620); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV
CVEs closed
30
None rated Critical
Exploited
2
CVE-2022-22620
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1634
96th percentile
Priority of the 30 CVEs
Patch now 2
Urgent 0
High 28
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| webkit2gtk3 | ol 8 | 0:2.34.6-1.el8 |
| webkit2gtk3-devel | ol 8 | 0:2.34.6-1.el8 |
| webkit2gtk3-jsc | ol 8 | 0:2.34.6-1.el8 |
| webkit2gtk3-jsc-devel | ol 8 | 0:2.34.6-1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2022-22620 | gir1.2-javascriptcoregtk-4.0: A use after free issue was addressed with improved memory management | 8.8 | 0.1634 | KEVExploited | |
| Patch now | CVE-2021-30952 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0696 | KEVExploited | |
| High | CVE-2021-30934 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0264 | None reported | |
| High | CVE-2021-30851 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0239 | None reported | |
| High | CVE-2021-30823 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0223 | None reported | |
| High | CVE-2021-30951 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0202 | None reported | |
| High | CVE-2022-22589 | gir1.2-javascriptcoregtk-4.0: A validation issue was addressed with improved input sanitization | 8.8 | 0.0201 | None reported | |
| High | CVE-2021-30936 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0199 | None reported | |
| High | CVE-2021-30953 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0195 | None reported | |
| High | CVE-2021-30889 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0193 | None reported | |
| High | CVE-2021-30849 | iTunes: Multiple memory corruption issues were addressed with improved memory handling. | 8.8 | 0.0190 | None reported | |
| High | CVE-2021-30887 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0178 | None reported | |
| High | CVE-2021-30888 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0173 | None reported | |
| High | CVE-2021-30897 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0171 | None reported | |
| High | CVE-2021-30984 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0167 | None reported | |
| High | CVE-2022-22592 | gir1.2-javascriptcoregtk-4.0: A logic issue was addressed with improved state management | 8.8 | 0.0162 | None reported | |
| High | CVE-2021-30818 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0162 | None reported | |
| High | CVE-2022-22590 | libjavascriptcoregtk-4.0-18: A use after free issue was addressed with improved memory management | 8.8 | 0.0156 | None reported | |
| High | CVE-2021-45481 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0153 | None reported | |
| High | CVE-2021-45482 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0153 | None reported | |
| High | CVE-2021-45483 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0152 | None reported | |
| High | CVE-2021-30809 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0151 | None reported | |
| High | CVE-2021-30890 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0146 | None reported | |
| High | CVE-2021-30954 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0145 | None reported | |
| High | CVE-2021-30846 | webkit2gtk3: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have b... | 8.8 | 0.0136 | None reported |
Showing 1 to 25 of 30
1Next