RLSA-2022:8054
- Source
- https://errata.rockylinux.org/RLSA-2022:8054
- Import Source
- https://storage.googleapis.com/resf-osv-data/RLSA-2022:8054.json
- JSON Data
- https://api.osv.dev/v1/vulns/RLSA-2022:8054
- Related
- Published
- 2022-11-15T06:14:22Z
- Modified
- 2023-02-02T14:15:10.664198Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Moderate: webkit2gtk3 security and bug fix update
- Details
-
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22624)
webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-22628)
webkitgtk: Buffer overflow leading to arbitrary code execution (CVE-2022-22629)
webkitgtk: Cookie management issue leading to sensitive user information disclosure (CVE-2022-22662)
webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26700)
webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26709)
webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26710)
webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26716)
webkitgtk: Use-after-free leading to arbitrary code execution (CVE-2022-26717)
webkitgtk: Memory corruption issue leading to arbitrary code execution (CVE-2022-26719)
webkitgtk: Heap buffer overflow in WebCore::TextureMapperLayer::setContentsLayer leading to arbitrary code execution (CVE-2022-30293)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.
- References
-
- https://errata.rockylinux.org/RLSA-2022:8054
- https://bugzilla.redhat.com/show_bug.cgi?id=2061996
- https://bugzilla.redhat.com/show_bug.cgi?id=2073893
- https://bugzilla.redhat.com/show_bug.cgi?id=2073896
- https://bugzilla.redhat.com/show_bug.cgi?id=2073899
- https://bugzilla.redhat.com/show_bug.cgi?id=2082548
- https://bugzilla.redhat.com/show_bug.cgi?id=2092732
- https://bugzilla.redhat.com/show_bug.cgi?id=2092733
- https://bugzilla.redhat.com/show_bug.cgi?id=2092734
- https://bugzilla.redhat.com/show_bug.cgi?id=2092735
- https://bugzilla.redhat.com/show_bug.cgi?id=2092736
- https://bugzilla.redhat.com/show_bug.cgi?id=2104787
- https://bugzilla.redhat.com/show_bug.cgi?id=2104789
- Credits
-
-
- Rocky Enterprise Software Foundation
-
- Red Hat
-
Affected packages
Rocky Linux:9 / webkit2gtk3
Package
- Name
- webkit2gtk3
- Purl
- pkg:rpm/rocky-linux/webkit2gtk3?distro=rocky-linux-9-0-legacy&epoch=0
Rocky Linux:9 / webkit2gtk3
Package
- Name
- webkit2gtk3
- Purl
- pkg:rpm/rocky-linux/webkit2gtk3?distro=rocky-linux-9&epoch=0