Summary
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkitgtk: data isolation bypass vulnerability (CVE-2024-44309)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | webkit2gtk3 | 2.46.3-2.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-devel | 2.46.3-2.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-jsc | 2.46.3-2.el8_10 |
| AlmaLinux · 8 | webkit2gtk3-jsc-devel | 2.46.3-2.el8_10 |
Vulnerabilities 5
-
Medium 6.3
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.…
KEV Nov 21, 2024 -
High 8.1
A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6,…
-
High 7.5
An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4…
-
Medium 6.5
The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS …
-
Medium 6.5
A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 1…
References
-
report
https://access.redhat.com/security/cve/CVE-2024-44309
-
report
https://bugzilla.redhat.com/2327927
-
advisory
https://errata.almalinux.org/8/ALSA-2024-10481.html
-
report
https://www.redhat.com/security/data/cve/CVE-2024-23254.html
-
report
https://www.redhat.com/security/data/cve/CVE-2024-23263.html
-
report
https://www.redhat.com/security/data/cve/CVE-2024-23280.html
-
report
https://www.redhat.com/security/data/cve/CVE-2024-23284.html