Summary
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22628)
* webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629)
* webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26709)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26710)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26716)
* webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26717)
* webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26719)
* webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution (CVE-2022-30293)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 9 | webkit2gtk3 | 0:2.36.7-1.el9_0 |
| Rocky Linux · 9 | webkit2gtk3 | 0:2.36.7-1.el9_1.1 |
Vulnerabilities 11
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 1…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safar…
-
High 8.8CVE-2022-22629 Public exploit
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, …
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…
-
High 8.8
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …
-
High 8.8CVE-2022-26717 Public exploit
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iO…
-
High 8.8
A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …
-
Unscored —
A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003…
-
Unscored —
In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::set…
References
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2061996
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073893
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073896
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2073899
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2082548
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092732
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092733
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092734
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092735
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2092736
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2104787
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2104789