Red Hat Security Advisory

RHSA-2025:0278

webkit2gtk3 security update

Released 2025-01-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) webkit2gtk3-2.46.5-1.el8_4, webkit2gtk3-devel-2.46.5-1.el8_4, webkit2gtk3-jsc-2.46.5-1.el8_4 +1
Red Hat Enterprise Linux AppStream E4S (v.8.4) webkit2gtk3-2.46.5-1.el8_4, webkit2gtk3-devel-2.46.5-1.el8_4, webkit2gtk3-jsc-2.46.5-1.el8_4 +1
Red Hat Enterprise Linux AppStream TUS (v.8.4) webkit2gtk3-2.46.5-1.el8_4, webkit2gtk3-devel-2.46.5-1.el8_4, webkit2gtk3-jsc-2.46.5-1.el8_4 +1

TI-2024-36579 CVE-2024-54502 · GHSA-w64q-ccr3-358g

MEDIUM 46

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.17137 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125

TI-2024-36582 CVE-2024-54505 · GHSA-qfp8-pvg8-2xph

MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0107 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3 CWE-843

TI-2024-36562 CVE-2024-54479 · GHSA-hp58-68h4-82p8

MEDIUM 42

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01585 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3

TI-2024-36585 CVE-2024-54508 · GHSA-rq2m-fjrh-fqx7

LOW 35

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00967 Published 2024-12-11 Partial fix · 18.2, 17.7.6 +3 CWE-125