ALSA-2023:6535 — Important: webkit2gtk3 security and bug fix update

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: arbitrary code execution (CVE-2023-32393)
* webkitgtk: bypass Same Origin Policy (CVE-2023-38572)
* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-38592)
* webkitgtk: arbitrary code execution (CVE-2023-38594)
* webkitgtk: arbitrary code execution (CVE-2023-38595)
* webkitgtk: arbitrary code execution (CVE-2023-38597)
* webkitgtk: arbitrary code execution (CVE-2023-38600)
* webkitgtk: arbitrary code execution (CVE-2023-38611)
* webkitgtk: Memory corruption issue when processing web content (CVE-2022-32885)
* webkitgtk: Same Origin Policy bypass via crafted web content (CVE-2023-27932)
* webkitgtk: Website may be able to track sensitive user information (CVE-2023-27954)
* webkitgtk: use after free vulnerability (CVE-2023-28198)
* webkitgtk: content security policy blacklist failure (CVE-2023-32370)
* webkitgtk: disclose sensitive information (CVE-2023-38133)
* webkitgtk: track sensitive user information (CVE-2023-38599)
* webkitgtk: processing web content may lead to arbitrary code execution (CVE-2023-39434)
* webkitgtk: arbitrary javascript code execution (CVE-2023-40397)
* webkitgtk: attacker with JavaScript execution may be able to execute arbitrary code (CVE-2023-40451)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 4

Release	Package	Fixed in
AlmaLinux · 9	webkit2gtk3	2.40.5-1.el9
AlmaLinux · 9	webkit2gtk3-devel	2.40.5-1.el9
AlmaLinux · 9	webkit2gtk3-jsc	2.40.5-1.el9
AlmaLinux · 9	webkit2gtk3-jsc-devel	2.40.5-1.el9

Vulnerabilities 18

High 8.8

CVE-2022-32885

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…

Apple macOS webkit2gtk webkit2gtk macOS Debian Ubuntu

May 8, 2023
High 8.8

CVE-2023-38600 Public exploit

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
High 8.8

CVE-2023-39434

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watc…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu

Sep 26, 2023
Medium 6.5

CVE-2023-27954

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 8, 2023
Medium 5.5

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 8, 2023
Unscored —

CVE-2023-28198

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, …

Apple macOS iOS and iPadOS qtwebkit-source macOS iOS Debian Ubuntu

Aug 14, 2023
Unscored —

CVE-2023-32370

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Polic…

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu

Sep 6, 2023
Unscored —

CVE-2023-32393

The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2023-38133

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
Unscored —

CVE-2023-38572

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2023-38592

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, t…

Apple macOS iOS and iPadOS watchOS macOS iOS Debian Ubuntu

Jul 28, 2023
Unscored —

CVE-2023-38594

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
Unscored —

CVE-2023-38595

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2023-38597

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
Unscored —

CVE-2023-38599

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 28, 2023
Unscored —

CVE-2023-38611

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 27, 2023
Unscored —

CVE-2023-40397

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able …

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu

Sep 6, 2023
Unscored —

CVE-2023-40451

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with J…

Apple Safari qtwebkit-source qtwebkit-opensource-src Browsers Debian Ubuntu

Sep 26, 2023

References

report
https://access.redhat.com/security/cve/CVE-2022-32885
report
https://access.redhat.com/security/cve/CVE-2023-27932
report
https://access.redhat.com/security/cve/CVE-2023-27954
report
https://access.redhat.com/security/cve/CVE-2023-28198
report
https://access.redhat.com/security/cve/CVE-2023-32370
report
https://access.redhat.com/security/cve/CVE-2023-32393
report
https://access.redhat.com/security/cve/CVE-2023-38133
report
https://access.redhat.com/security/cve/CVE-2023-38572
report
https://access.redhat.com/security/cve/CVE-2023-38592
report
https://access.redhat.com/security/cve/CVE-2023-38594
report
https://access.redhat.com/security/cve/CVE-2023-38595
report
https://access.redhat.com/security/cve/CVE-2023-38597
report
https://access.redhat.com/security/cve/CVE-2023-38599
report
https://access.redhat.com/security/cve/CVE-2023-38600
report
https://access.redhat.com/security/cve/CVE-2023-38611
report
https://access.redhat.com/security/cve/CVE-2023-39434
report
https://access.redhat.com/security/cve/CVE-2023-40397
report
https://access.redhat.com/security/cve/CVE-2023-40451
report
https://bugzilla.redhat.com/2224608
report
https://bugzilla.redhat.com/2231015
report
https://bugzilla.redhat.com/2231017
report
https://bugzilla.redhat.com/2231018
report
https://bugzilla.redhat.com/2231019
report
https://bugzilla.redhat.com/2231020
report
https://bugzilla.redhat.com/2231021
report
https://bugzilla.redhat.com/2231022
report
https://bugzilla.redhat.com/2231028
report
https://bugzilla.redhat.com/2231043
report
https://bugzilla.redhat.com/2236842
report
https://bugzilla.redhat.com/2236843
report
https://bugzilla.redhat.com/2236844
report
https://bugzilla.redhat.com/2238943
report
https://bugzilla.redhat.com/2238944
report
https://bugzilla.redhat.com/2238945
report
https://bugzilla.redhat.com/2241405
report
https://bugzilla.redhat.com/2241409
advisory
https://errata.almalinux.org/9/ALSA-2023-6535.html

Important: webkit2gtk3 security and bug fix update

Summary

Fixed packages 4

Vulnerabilities 18

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watc…

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.…

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, …

A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Polic…

The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.…

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, t…

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …

A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8…

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macO…

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able …

This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with J…

References