Summary
[2.40.5-1]
- Upgrade to 2.40.5. Also, disable JIT
Resolves: #2176269
Resolves: #2185742
Resolves: #2209728
Resolves: #2209745
Resolves: #2218649
Resolves: #2218651
Resolves: #2224611
[2.38.5-1.4]
- Add patch for CVE-2023-28204
Resolves: #2209744
- Add patch for CVE-2023-32373
Resolves: #2209727
[2.38.5-1.3]
- Restore libwpe and wpebackend-fdo dependencies
Related: #2185741 (sort of)
[2.38.5-1.2]
- Disable libwpe and wpebackend-fdo dependencies
Related: #2185741 (sort of)
[2.38.5-1.1]
- Add patch for CVE-2023-28205
Resolves: #2185741
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | webkit2gtk3 | 0:2.40.5-1.el8 |
| Oracle Linux · 8 | webkit2gtk3-devel | 0:2.40.5-1.el8 |
| Oracle Linux · 8 | webkit2gtk3-jsc | 0:2.40.5-1.el8 |
| Oracle Linux · 8 | webkit2gtk3-jsc-devel | 0:2.40.5-1.el8 |
Vulnerabilities 18
-
High 8.8
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…
-
High 8.8CVE-2023-38600 Public exploit
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…
-
High 8.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, watc…
-
Medium 6.5
The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.…
-
Medium 5.5
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…
-
Unscored —
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, …
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Polic…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, t…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS …
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in Safari 16.6, watchOS 9.6, iOS 15.7.8…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macO…
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able …
-
Unscored —
This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 17. An attacker with J…