RHSA-2022:7704 — Red Hat Security Advisory: webkit2gtk3 security and bug fix update

Fixed packages 25

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-debuginfo	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-debugsource	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-devel	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-devel-debuginfo	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-debuginfo	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-devel	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.36.7-1.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2-debuginfo	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2-debugsource	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2-devel	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2-devel-debuginfo	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2-fam	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2-fam-debuginfo	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2-tests	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos	glib2-tests-debuginfo	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	glib2-debuginfo	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	glib2-debugsource	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	glib2-devel-debuginfo	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	glib2-doc	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	glib2-fam-debuginfo	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	glib2-static	0:2.56.4-159.el8
Red Hat · RHEL 8 enterprise_linux:8::crb	glib2-tests-debuginfo	0:2.56.4-159.el8

Vulnerabilities 14

High 8.8

CVE-2022-22624

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 1…

Apple tvOS Safari qtwebkit-source Browsers Debian Ubuntu Alpine

Sep 23, 2022
High 8.8

CVE-2022-22628

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safar…

Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine

Sep 23, 2022
High 8.8

CVE-2022-22629 Public exploit

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari…

Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine

Sep 23, 2022
High 8.8

CVE-2022-26700

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, …

Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu

Sep 23, 2022
High 8.8

CVE-2022-26709

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…

Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu

Nov 1, 2022
High 8.8

CVE-2022-26710

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …

Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu

Nov 1, 2022
High 8.8

CVE-2022-26716

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …

Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu

Nov 1, 2022
High 8.8

CVE-2022-26717 Public exploit

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iO…

Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu

Nov 1, 2022
High 8.8

CVE-2022-26719

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …

Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu

Nov 1, 2022
High 8.8

CVE-2022-32792

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 1…

Apple macOS watchOS tvOS macOS Debian Ubuntu Alpine

Sep 23, 2022
Medium 6.5

CVE-2022-32816

The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 1…

Apple macOS watchOS tvOS macOS Debian Ubuntu Alpine

Sep 23, 2022
Unscored —

CVE-2022-22662

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003…

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu

May 26, 2022
Unscored —

CVE-2022-30293

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::set…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine

May 6, 2022
Unscored —

CVE-2022-32891

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiti…

Apple watchOS Safari iOS iOS Browsers Debian Ubuntu

Feb 27, 2023

References

article
https://access.redhat.com/security/updates/classification/#moderate
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
report
https://bugzilla.redhat.com/show_bug.cgi?id=2061994
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073893
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073896
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073899
report
https://bugzilla.redhat.com/show_bug.cgi?id=2082548
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092732
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092733
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092734
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092735
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092736
report
https://bugzilla.redhat.com/show_bug.cgi?id=2099334
report
https://bugzilla.redhat.com/show_bug.cgi?id=2104787
report
https://bugzilla.redhat.com/show_bug.cgi?id=2104789
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7704.json
report
https://access.redhat.com/security/cve/CVE-2022-22624
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22624
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22624
report
https://access.redhat.com/security/cve/CVE-2022-22628
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22628
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22628
report
https://access.redhat.com/security/cve/CVE-2022-22629
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22629
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22629
report
https://access.redhat.com/security/cve/CVE-2022-22662
advisory
https://www.cve.org/CVERecord?id=CVE-2022-22662
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-22662
article
https://webkitgtk.org/security/WSA-2022-0006.html
report
https://access.redhat.com/security/cve/CVE-2022-26700
advisory
https://www.cve.org/CVERecord?id=CVE-2022-26700
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-26700
article
https://webkitgtk.org/security/WSA-2022-0005.html
report
https://access.redhat.com/security/cve/CVE-2022-26709
advisory
https://www.cve.org/CVERecord?id=CVE-2022-26709
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-26709
report
https://access.redhat.com/security/cve/CVE-2022-26710
advisory
https://www.cve.org/CVERecord?id=CVE-2022-26710
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-26710

Red Hat Security Advisory: webkit2gtk3 security and bug fix update

Fixed packages 25

Vulnerabilities 14

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 1…

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safar…

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari…

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, …

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iO…

A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 1…

The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 1…

A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003…

In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::set…

The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiti…

References