Red Hat Enterprise Linux: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 23

• High 8.8
  CVE-2022-22624

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 1…

  Apple tvOS Safari qtwebkit-source Browsers Debian Ubuntu Alpine
  Sep 23, 2022
• High 8.8
  CVE-2022-22628

  A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safar…

  Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine
  Sep 23, 2022
• High 8.8
  CVE-2022-22629 Public exploit

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari…

  Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine
  Sep 23, 2022
• High 8.8
  CVE-2022-26700

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, watchOS 8.6, …

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Sep 23, 2022
• High 8.8
  CVE-2022-26709

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, iOS 15.5 and iP…

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-26710

  A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.5 and iPadOS 15.5, …

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-26716

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-26717 Public exploit

  A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.5, watchOS 8.6, iO…

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 8.8
  CVE-2022-26719

  A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 15.5, iOS 15.5 and …

  Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  Nov 1, 2022
• High 7.7
  CVE-2022-21682

  flatpak-builder can access files outside the build directory.

  Flatpak is a Linux application sandboxing and distribution framework. A path traversal vulnerability affects versions of Flatpak prior to 1.12.3 and 1.10.6. flatpak-builder applies `finish-args` last in the build. At this point the build directory will have t…

  Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine
  Jan 13, 2022
• High 7.1
  CVE-2022-2989

  Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification

  An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to…

  podman podman github.com/containers/podman/v4 github.com/containers/podman/v3 Debian Ubuntu Azure Linux Alpine Go
  Sep 13, 2022
• High 7.1
  CVE-2022-2990

  Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification

  An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used t…

  buildah buildah golang-github-containers-buildah golang-github-containers-buildah Debian Ubuntu Azure Linux Alpine Go
  Sep 13, 2022
• Unscored —
  CVE-2021-4048

  An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10…

  openblas lapack lapack lapack Debian Ubuntu Azure Linux
  Dec 8, 2021
• Unscored —
  CVE-2021-44269

  An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPac…

  wavpack wavpack wavpack wavpack Debian Ubuntu Azure Linux Alpine
  Mar 10, 2022
• Unscored —
  CVE-2022-1049

  A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts …

  pcs pcs Debian Ubuntu
  Mar 25, 2022
• Unscored —
  CVE-2022-22662

  A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu
  May 26, 2022
• Unscored —
  CVE-2022-25308

  A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially c…

  fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine
  Sep 6, 2022
• Unscored —
  CVE-2022-25309

  A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() functio…

  fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine
  Sep 6, 2022
• Unscored —
  CVE-2022-25310

  A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function …

  fribidi fribidi fribidi fribidi Debian Ubuntu Azure Linux Alpine
  Sep 6, 2022
• Unscored —
  CVE-2022-30293

  In WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore::TextureMapperLayer::set…

  qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  May 6, 2022
• Unscored —
  CVE-2022-30698

  Novel "ghost domain names" attack by introducing subdomain delegations

  NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …

  NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  Aug 1, 2022
• Unscored —
  CVE-2022-30699

  Novel "ghost domain names" attack by updating almost expired delegation information

  NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…

  NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  Aug 1, 2022
• Unscored —
  CVE-2022-32189

  Panic when decoding Float and Rat types in math/big

  A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.

  Go standard library math/big golang go Debian Ubuntu Azure Linux Alpine Go
  Aug 9, 2022

Revision history

1. 2026-03-09 #17

   Neue Updates von Red Hat aufgenommen

2. 2025-11-27 #16

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

3. 2024-04-24 #15

   Neue Updates von Red Hat aufgenommen

4. 2024-02-19 #14

   Neue Updates von Amazon aufgenommen

5. 2024-02-05 #13

   Neue Updates von Amazon aufgenommen

6. 2024-01-22 #12

   Neue Updates von Amazon aufgenommen

7. 2023-07-20 #11

   Neue Updates von Amazon aufgenommen

8. 2023-05-16 #10

   Neue Updates von Red Hat aufgenommen

9. 2023-05-09 #9

   Neue Updates von Red Hat aufgenommen

10. 2023-03-15 #8

    Neue Updates von Red Hat aufgenommen

11. 2023-01-17 #7

    Neue Updates von Red Hat aufgenommen

12. 2022-12-18 #6

    Neue Updates von Gentoo aufgenommen

13. 2022-12-07 #5

    Neue Updates von Red Hat aufgenommen

14. 2022-11-28 #4

    Neue Updates von Oracle Linux und Red Hat aufgenommen

15. 2022-11-23 #3

    Neue Updates von Oracle Linux aufgenommen

16. 2022-11-15 #2

    Neue Updates von Red Hat und Oracle Linux aufgenommen

17. 2022-11-08 #1

    Initiale Fassung

References

• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7447
• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7458
• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7514
• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7548
• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7558
• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7822
• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7704
• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7622
• Red Hat Security Advisory vom 2022-11-08
  https://access.redhat.com/errata/RHSA-2022:7639
• Red Hat Security Advisory RHSA-2022:8008 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8008
• Oracle Linux Security Advisory ELSA-2022-7704 vom 2022-11-15
  https://linux.oracle.com/errata/ELSA-2022-7704.html
• Red Hat Security Advisory RHSA-2022:8431 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8431
• Oracle Linux Security Advisory ELSA-2022-7458 vom 2022-11-15
  https://linux.oracle.com/errata/ELSA-2022-7458.html
• Red Hat Security Advisory RHSA-2022:7935 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:7935
• Red Hat Security Advisory RHSA-2022:7950 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:7950
• Red Hat Security Advisory RHSA-2022:8139 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8139
• Red Hat Security Advisory RHSA-2022:8062 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8062
• Red Hat Security Advisory RHSA-2022:8054 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8054
• Red Hat Security Advisory RHSA-2022:8011 vom 2022-11-15
  https://access.redhat.com/errata/RHSA-2022:8011
• Oracle Linux Security Advisory ELSA-2022-8054 vom 2022-11-22
  https://linux.oracle.com/errata/ELSA-2022-8054.html
• Oracle Linux Security Advisory ELSA-2022-7822 vom 2022-11-24
  http://linux.oracle.com/errata/ELSA-2022-7822.html
• Oracle Linux Security Advisory ELSA-2022-8431 vom 2022-11-24
  http://linux.oracle.com/errata/ELSA-2022-8431.html
• Oracle Linux Security Advisory ELSA-2022-10031 vom 2022-11-29
  https://linux.oracle.com/errata/ELSA-2022-10031.html
• Red Hat Security Advisory RHSA-2022:8626 vom 2022-11-29
  https://access.redhat.com/errata/RHSA-2022:8626
• Red Hat Security Advisory RHSA-2022:8781 vom 2022-12-08
  https://access.redhat.com/errata/RHSA-2022:8781
• Gentoo Linux Security Advisory GLSA-202212-02 vom 2022-12-19
  https://security.gentoo.org/glsa/202212-02
• Red Hat Security Advisory RHSA-2022:7398 vom 2023-01-18
  https://access.redhat.com/errata/RHSA-2022:7398
• Red Hat Security Advisory RHSA-2023:1275 vom 2023-03-15
  https://access.redhat.com/errata/RHSA-2023:1275
• Red Hat Security Advisory RHSA-2023:2193 vom 2023-05-09
  https://access.redhat.com/errata/RHSA-2023:2193
• Red Hat Security Advisory RHSA-2023:2758 vom 2023-05-16
  https://access.redhat.com/errata/RHSA-2023:2758
• Red Hat Security Advisory RHSA-2023:2802 vom 2023-05-16
  https://access.redhat.com/errata/RHSA-2023:2802
• Amazon Linux Security Advisory ALAS-2023-2116 vom 2023-07-20
  https://alas.aws.amazon.com/AL2/ALAS-2023-2116.html
• Amazon Linux Security Advisory ALASR4-2023-001 vom 2024-01-23
  https://alas.aws.amazon.com/AL2/ALASR4-2023-001.html
• Amazon Linux Security Advisory ALAS-2024-2452 vom 2024-02-06
  https://alas.aws.amazon.com/AL2/ALAS-2024-2452.html
• Amazon Linux Security Advisory ALAS-2024-2468 vom 2024-02-19
  https://alas.aws.amazon.com/AL2/ALAS-2024-2468.html
• Red Hat Security Advisory RHSA-2024:2045 vom 2024-04-25
  https://access.redhat.com/errata/RHSA-2024:2045
• Rocky Linux Security Advisory RLSA-2023:2758 vom 2025-11-28
  https://errata.build.resf.org/RLSA-2023:2758
• Rocky Linux Security Advisory RLSA-2023:2802 vom 2025-11-28
  https://errata.build.resf.org/RLSA-2023:2802
• Red Hat Security Advisory RHSA-2026:4128 vom 2026-03-09
  https://access.redhat.com/errata/RHSA-2026:4128