High 2 exploited CVEs ELSA-2023-3432 2 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

Published Jun 6, 2023 · Updated Jun 6, 2023

Ecosystem: Oracle Linux

Summary

[2.38.5-1.2]
- Add patch for CVE-2023-28204
Resolves: #2209747
- Add patch for CVE-2023-32373
Resolves: #2209730

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	webkit2gtk3	0:2.38.5-1.el9_2.2
Oracle Linux · 9	webkit2gtk3-devel	0:2.38.5-1.el9_2.2
Oracle Linux · 9	webkit2gtk3-jsc	0:2.38.5-1.el9_2.2
Oracle Linux · 9	webkit2gtk3-jsc-devel	0:2.38.5-1.el9_2.2

Vulnerabilities 2

High 8.8

CVE-2023-32373 Exploited EPSS 12%

A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 23, 2023
KEV May 22, 2023
Medium 6.5

CVE-2023-28204 Exploited EPSS 14%

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 23, 2023
KEV May 22, 2023