Red Hat Security Advisory: webkit2gtk3 security and bug fix update

Fixed packages 9

Vulnerabilities 14

• High 8.8
  CVE-2022-22624

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 1…

  Apple tvOS Safari qtwebkit-source Browsers Debian Ubuntu Alpine
  Sep 23, 2022
• High 8.8
  CVE-2022-22628

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safar…

  Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine
  Sep 23, 2022
• High 8.8
  CVE-2022-22629 Public exploit

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari…

  Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine
  Sep 23, 2022
• High 8.8
  CVE-2022-26700

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, …

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Sep 23, 2022
• High 8.8
  CVE-2022-26709

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-26710

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-26716

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-26717 Public exploit

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iO…

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-26719

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-32792

  An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 1…

  Apple macOS watchOS tvOS macOS Debian Ubuntu Alpine
  Sep 23, 2022
• Medium 6.5
  CVE-2022-32816

  The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 1…

  Apple macOS watchOS tvOS macOS Debian Ubuntu Alpine
  Sep 23, 2022
• Unscored —
  CVE-2022-22662

  A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu
  May 26, 2022
• Unscored —
  CVE-2022-30293

  In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::set…

  qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  May 6, 2022
• Unscored —
  CVE-2022-32891

  The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiti…

  Apple watchOS Safari iOS iOS Browsers Debian Ubuntu
  Feb 27, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2061996
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2073893
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2073896
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2073899
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2082548
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2092732
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2092733
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2092734
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2092735
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2092736
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2104787
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2104789
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8054.json
• report
  https://access.redhat.com/security/cve/CVE-2022-22624
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22624
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22624
• report
  https://access.redhat.com/security/cve/CVE-2022-22628
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22628
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22628
• report
  https://access.redhat.com/security/cve/CVE-2022-22629
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22629
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22629
• report
  https://access.redhat.com/security/cve/CVE-2022-22662
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-22662
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-22662
• article
  https://webkitgtk.org/security/WSA-2022-0006.html
• report
  https://access.redhat.com/security/cve/CVE-2022-26700
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-26700
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-26700
• article
  https://webkitgtk.org/security/WSA-2022-0005.html
• report
  https://access.redhat.com/security/cve/CVE-2022-26709
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-26709
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-26709
• report
  https://access.redhat.com/security/cve/CVE-2022-26710
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-26710
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-26710
• report
  https://access.redhat.com/security/cve/CVE-2022-26716