High ELSA-2024-9553 5 CVEs

Important: webkit2gtk3 security update (Oracle Linux 9)

Published Nov 18, 2024 · Updated Nov 18, 2024

Ecosystem: Oracle Linux

Summary

[2.46.3-1]
- Update to 2.46.3

[2.46.2-1]
- Update to 2.46.2
- Add patch to disable Evolution sandbox warning

[2.46.1-2]
- Add patch to keep GSocketMonitor callback alive
Resolves: RHEL-59185

[2.46.1-1]
- Update to 2.46.1
Resolves: RHEL-59185

Fixed packages 4

Release	Package	Fixed in
Oracle Linux · 9	webkit2gtk3	0:2.46.3-1.el9_5
Oracle Linux · 9	webkit2gtk3-devel	0:2.46.3-1.el9_5
Oracle Linux · 9	webkit2gtk3-jsc	0:2.46.3-1.el9_5
Oracle Linux · 9	webkit2gtk3-jsc-devel	0:2.46.3-1.el9_5

Vulnerabilities 5

Medium 6.5

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious webs…

Apple macOS Safari qtwebkit-source macOS Browsers Debian Ubuntu

Sep 16, 2024
Medium 6.5

CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. Thi…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 16, 2024
Medium 5.5

CVE-2024-44185

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 24, 2024
Medium 5.4

CVE-2024-44296

The issue was addressed with improved checks. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 28, 2024
Medium 4.3

CVE-2024-44244

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 28, 2024