Red Hat Security Advisory

RHSA-2024:10481

webkit2gtk3 security update

Released 2024-11-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) webkit2gtk3-2.46.3-2.el8_10, webkit2gtk3-devel-2.46.3-2.el8_10, webkit2gtk3-jsc-2.46.3-2.el8_10 +1

TI-2024-29864 CVE-2024-44309 · GHSA-6cpp-mpjx-cx8v

CRITICAL 85KEV

A cookie management issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.21948 Published 2024-11-19 Partial fix · 18.1.1, 17.7.2 +2 CWE-79

TI-2024-15368 CVE-2024-23263 · GHSA-xrrw-7rr2-829v

MEDIUM 40

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01496 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-20

TI-2024-15385 CVE-2024-23280 · GHSA-qc99-8rmf-q4mv

LOW 35

An injection issue was addressed with improved validation.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01276 Published 2024-03-08 Partial fix · 17.4, 14.4 +1 CWE-74

TI-2024-15389 CVE-2024-23284 · GHSA-ppgm-9w39-cx97

LOW 32

A logic issue was addressed with improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01473 Published 2024-03-08 Partial fix · 17.4, 16.7.6 +3 CWE-693

TI-2024-15359 CVE-2024-23254 · GHSA-62qm-vc7f-rm93

LOW 31

The issue was addressed with improved UI handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01253 Published 2024-03-08 Partial fix · 17.4, 14.4 +2