High 2 exploited CVEs ELSA-2023-4201 2 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

Published Jul 20, 2023 · Updated Jul 20, 2023

Ecosystem: Oracle Linux

Summary

[2.38.5-1.3]
- Disable JIT (CVE-2023-32435, CVE-2023-32439)

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	webkit2gtk3	0:2.38.5-1.el9_2.3
Oracle Linux · 9	webkit2gtk3-devel	0:2.38.5-1.el9_2.3
Oracle Linux · 9	webkit2gtk3-jsc	0:2.38.5-1.el9_2.3
Oracle Linux · 9	webkit2gtk3-jsc-devel	0:2.38.5-1.el9_2.3

Vulnerabilities 2

High 8.8

CVE-2023-32435 Exploited EPSS 23%

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safa…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jun 23, 2023
KEV Jun 23, 2023
High 8.8

CVE-2023-32439 Exploited EPSS 24%

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jun 23, 2023
KEV Jun 23, 2023