RHSA-2024:8180 — Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Release	Package	Fixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3	0:2.46.1-2.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3-debuginfo	0:2.46.1-2.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3-debugsource	0:2.46.1-2.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3-devel	0:2.46.1-2.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3-devel-debuginfo	0:2.46.1-2.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3-jsc	0:2.46.1-2.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3-jsc-debuginfo	0:2.46.1-2.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3-jsc-devel	0:2.46.1-2.el9_4
Red Hat · RHEL 9 enterprise_linux:9::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.46.1-2.el9_4

Vulnerabilities 20

Critical 9.8

CVE-2024-40782

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
High 8.8

CVE-2023-43010

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Mar 12, 2026
High 8.8

CVE-2024-54534

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Dec 11, 2024
High 8.1

CVE-2024-23263

A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6,…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 8, 2024
High 8.1

CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
High 7.8

CVE-2024-27856

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 15, 2025
High 7.5

CVE-2024-23280

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 8, 2024
High 7.5

CVE-2024-27820

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
High 7.5

CVE-2024-27851

The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
High 7.5

CVE-2024-4558

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 7, 2024
Medium 6.5

CVE-2024-23254

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 8, 2024
Medium 6.5

CVE-2024-23284

A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 1…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Mar 8, 2024
Medium 6.5

CVE-2024-27838

The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
Medium 6.5

CVE-2024-40776

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40780

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40789

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious webs…

Apple macOS Safari qtwebkit-source macOS Browsers Debian Ubuntu

Sep 16, 2024
Medium 6.5

CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. Thi…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 16, 2024
Medium 5.5

CVE-2024-40779

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 5.5

CVE-2024-44185

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 24, 2024

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2270289
report
https://bugzilla.redhat.com/show_bug.cgi?id=2270290
report
https://bugzilla.redhat.com/show_bug.cgi?id=2270291
report
https://bugzilla.redhat.com/show_bug.cgi?id=2270292
report
https://bugzilla.redhat.com/show_bug.cgi?id=2279689
report
https://bugzilla.redhat.com/show_bug.cgi?id=2301841
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302067
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302069
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302070
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302071
report
https://bugzilla.redhat.com/show_bug.cgi?id=2312724
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314698
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314702
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314704
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314706
report
https://bugzilla.redhat.com/show_bug.cgi?id=2323263
report
https://bugzilla.redhat.com/show_bug.cgi?id=2333846
report
https://bugzilla.redhat.com/show_bug.cgi?id=2344618
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8180.json
report
https://access.redhat.com/security/cve/CVE-2023-43010
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448778
advisory
https://www.cve.org/CVERecord?id=CVE-2023-43010
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-43010
article
https://webkitgtk.org/security/WSA-2026-0001.html
report
https://access.redhat.com/security/cve/CVE-2024-4558
advisory
https://www.cve.org/CVERecord?id=CVE-2024-4558
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-4558
report
https://access.redhat.com/security/cve/CVE-2024-23254
advisory
https://www.cve.org/CVERecord?id=CVE-2024-23254
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-23254
article
https://seclists.org/fulldisclosure/2024/Mar/21
report
https://access.redhat.com/security/cve/CVE-2024-23263
advisory
https://www.cve.org/CVERecord?id=CVE-2024-23263
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-23263
report
https://access.redhat.com/security/cve/CVE-2024-23280
advisory
https://www.cve.org/CVERecord?id=CVE-2024-23280
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-23280
report
https://access.redhat.com/security/cve/CVE-2024-23284

Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 20

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

A logic issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6,…

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4…

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8…

The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macO…

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

The issue was addressed with improved UI handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS …

A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 1…

The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, i…

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious webs…

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. Thi…

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

References