Red Hat Security Advisory

RHSA-2024:9144

webkit2gtk3 security update

Released 2024-11-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3-2.44.3-2.el9, webkit2gtk3-devel-2.44.3-2.el9, webkit2gtk3-jsc-2.44.3-2.el9 +1

Fixes 5 records

TI-2024-04244 CVE-2024-4558 · GHSA-r4j8-j63p-24j8

Use after free in Google Chrome

MEDIUM 46

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01533 Published 2024-05-07 Partial fix · 124.0.6367.155 CWE-416

TI-2023-23047 CVE-2023-43010 · GHSA-4v27-f65g-fr6x

Out-of-bounds write in Apple iOS and iPadOS

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00974 Published 2026-03-12 Partial fix · 17.2, 14.2 +2 CWE-787

TI-2023-23026 CVE-2023-42950 · GHSA-6cvp-282g-6jp8

Use after free in Apple Safari

MEDIUM 42

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01069 Published 2024-03-28 Partial fix · 17.2, 14.2 +1 CWE-416

TI-2023-22931 CVE-2023-42843 · GHSA-2c3h-gr5x-3fh2

Authentication bypass by spoofing in Apple iOS and iPadOS

LOW 37

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00973 Published 2024-02-21 Partial fix · 16.7, 17.1 +1 CWE-290

TI-2023-23032 CVE-2023-42956 · GHSA-jprr-pf4r-gvp5

Apple Safari: Processing web content may lead to a denial-of-service

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00981 Published 2024-03-28 Partial fix · 17.2, 14.2