Linux · Security advisory · November 8, 2022
RHSA-2022:7704: Security update for 10 packages
RHSA-2022:7704, released November 8, 2022, fixes 14 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
14
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0819
94th percentile
Priority of the 14 CVEs
Patch now 0
Urgent 0
High 12
Routine 2
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| glib2 | RHEL 8 | 0:2.56.4-159.el8 |
| glib2-devel | RHEL 8 | 0:2.56.4-159.el8 |
| glib2-doc | RHEL 8 | 0:2.56.4-159.el8 |
| glib2-fam | RHEL 8 | 0:2.56.4-159.el8 |
| glib2-static | RHEL 8 | 0:2.56.4-159.el8 |
| glib2-tests | RHEL 8 | 0:2.56.4-159.el8 |
| webkit2gtk3 | RHEL 8 | 0:2.36.7-1.el8 |
| webkit2gtk3-devel | RHEL 8 | 0:2.36.7-1.el8 |
| webkit2gtk3-jsc | RHEL 8 | 0:2.36.7-1.el8 |
| webkit2gtk3-jsc-devel | RHEL 8 | 0:2.36.7-1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2022-22629 | iTunes: Out-of-bounds Write | 8.8 | 0.0505 | None reported | |
| High | CVE-2022-32792 | gir1.2-javascriptcoregtk-4.0: An out-of-bounds write issue was addressed with improved input validation | 8.8 | 0.0230 | None reported | |
| High | CVE-2022-30293 | libjavascriptcoregtk-4.1-0: In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::s... | 8.8 | 0.0222 | None reported | |
| High | CVE-2022-26717 | iTunes: Use After Free | 8.8 | 0.0204 | None reported | |
| High | CVE-2022-26700 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0147 | None reported | |
| High | CVE-2022-22662 | gir1.2-javascriptcoregtk-4.0: A cookie management issue was addressed with improved state management | 8.8 | 0.0142 | None reported | |
| High | CVE-2022-22624 | gir1.2-javascriptcoregtk-4.0: A use after free issue was addressed with improved memory management | 8.8 | 0.0132 | None reported | |
| High | CVE-2022-22628 | libjavascriptcoregtk-4.0-18: A use after free issue was addressed with improved memory management | 8.8 | 0.0132 | None reported | |
| High | CVE-2022-26719 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0124 | None reported | |
| High | CVE-2022-26716 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0114 | None reported | |
| High | CVE-2022-26709 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0111 | None reported | |
| High | CVE-2022-26710 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 8.8 | 0.0111 | None reported | |
| Routine | CVE-2022-32816 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 6.5 | 0.0819 | None reported | |
| Routine | CVE-2022-32891 | glib2: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. GLib provides the core applic... | 6.1 | 0.0071 | None reported |
Showing 1 to 14 of 14
1