Linux · Security advisory · November 22, 2022
ELSA-2022-8054: Security update for 4 packages
ELSA-2022-8054, released November 22, 2022, fixes 11 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0505
92nd percentile
Priority of the 11 CVEs
Patch now 0
Urgent 0
High 11
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| webkit2gtk3 | ol 9 | 0:2.36.7-1.el9 |
| webkit2gtk3-devel | ol 9 | 0:2.36.7-1.el9 |
| webkit2gtk3-jsc | ol 9 | 0:2.36.7-1.el9 |
| webkit2gtk3-jsc-devel | ol 9 | 0:2.36.7-1.el9 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-22629 | iTunes: Out-of-bounds Write | 8.8 | 0.0505 | None reported | |
| High | CVE-2022-30293 | libjavascriptcoregtk-4.1-0: In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::s... | 8.8 | 0.0222 | None reported | |
| High | CVE-2022-26717 | iTunes: Use After Free | 8.8 | 0.0204 | None reported | |
| High | CVE-2022-26700 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0147 | None reported | |
| High | CVE-2022-22662 | gir1.2-javascriptcoregtk-4.0: A cookie management issue was addressed with improved state management | 8.8 | 0.0142 | None reported | |
| High | CVE-2022-22624 | gir1.2-javascriptcoregtk-4.0: A use after free issue was addressed with improved memory management | 8.8 | 0.0132 | None reported | |
| High | CVE-2022-22628 | libjavascriptcoregtk-4.0-18: A use after free issue was addressed with improved memory management | 8.8 | 0.0132 | None reported | |
| High | CVE-2022-26719 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0124 | None reported | |
| High | CVE-2022-26716 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0114 | None reported | |
| High | CVE-2022-26709 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0111 | None reported | |
| High | CVE-2022-26710 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0111 | None reported |
Showing 1 to 11 of 11
1