Red Hat Security Advisory

RHSA-2024:9638

webkit2gtk3 security update

Released 2024-11-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.2) webkit2gtk3-2.46.3-1.el9_2, webkit2gtk3-devel-2.46.3-1.el9_2, webkit2gtk3-jsc-2.46.3-1.el9_2 +1

TI-2024-15328 CVE-2024-23222 · GHSA-93px-8x98-j7p2

CRITICAL 97KEV

A type confusion issue was addressed with improved checks.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10593 Published 2024-01-23 Partial fix · 17.3, 15.8.7 +5 CWE-843

TI-2024-18447 CVE-2024-27833 · GHSA-984g-34ww-rvq9

MEDIUM 42

An integer overflow was addressed with improved input validation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00819 Published 2024-06-10 Partial fix · 17.5, 16.7.8 +1 CWE-190

TI-2024-18422 CVE-2024-27808 · GHSA-pwf2-5r2p-9c9w

MEDIUM 42

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0118 Published 2024-06-10 Partial fix · 17.5, 14.5 +2 CWE-786

TI-2024-29751 CVE-2024-44185 · GHSA-xjj4-3gwf-mwqh

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00289 Published 2024-10-24 Partial fix · 17.6, 14.6 +2

TI-2024-29805 CVE-2024-44244 · GHSA-jpwg-q62q-pwpw

LOW 22

A memory corruption issue was addressed with improved input validation.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00963 Published 2024-10-28 Partial fix · 18.1, 15.1 +2 CWE-787