RHSA-2024:8492 — Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Release	Package	Fixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3	0:2.46.1-1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3-debuginfo	0:2.46.1-1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3-debugsource	0:2.46.1-1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3-devel	0:2.46.1-1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3-devel-debuginfo	0:2.46.1-1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3-jsc	0:2.46.1-1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3-jsc-debuginfo	0:2.46.1-1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3-jsc-devel	0:2.46.1-1.el9_2
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.46.1-1.el9_2

Vulnerabilities 19

High 8.8

CVE-2023-42917 Exploited

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu Wolfi

Nov 30, 2023
KEV Dec 4, 2023
High 8.8

CVE-2023-43000 Exploited

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Nov 5, 2025
KEV Mar 5, 2026
Critical 9.8

CVE-2024-40782

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
High 8.8

CVE-2022-32885

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…

Apple macOS webkit2gtk webkit2gtk macOS Debian Ubuntu

May 8, 2023
High 8.8

CVE-2023-42852

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 25, 2023
High 8.8

CVE-2023-42970

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Apr 11, 2025
High 8.8

CVE-2023-43010

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Mar 12, 2026
High 8.8

CVE-2024-54534

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Dec 11, 2024
High 8.1

CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
High 7.8

CVE-2024-27856

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 15, 2025
High 7.5

CVE-2024-27820

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
High 7.5

CVE-2024-27851

The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
High 7.5

CVE-2024-4558

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 7, 2024
High 7.3

CVE-2023-42875

Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Apr 11, 2025
Medium 6.5

CVE-2024-40776

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40780

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40789

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 5.5

CVE-2024-40779

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Unscored —

CVE-2023-40397

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able …

Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu

Sep 6, 2023

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2236842
report
https://bugzilla.redhat.com/show_bug.cgi?id=2238945
report
https://bugzilla.redhat.com/show_bug.cgi?id=2253058
report
https://bugzilla.redhat.com/show_bug.cgi?id=2271456
report
https://bugzilla.redhat.com/show_bug.cgi?id=2279689
report
https://bugzilla.redhat.com/show_bug.cgi?id=2301841
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302067
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302069
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302070
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302071
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314698
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314704
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8492.json
report
https://access.redhat.com/security/cve/CVE-2022-32885
advisory
https://www.cve.org/CVERecord?id=CVE-2022-32885
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-32885
article
https://webkitgtk.org/security/WSA-2023-0003.html
report
https://access.redhat.com/security/cve/CVE-2023-40397
advisory
https://www.cve.org/CVERecord?id=CVE-2023-40397
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-40397
article
https://wpewebkit.org/security/WSA-2023-0008.html
report
https://access.redhat.com/security/cve/CVE-2023-42852
advisory
https://www.cve.org/CVERecord?id=CVE-2023-42852
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-42852
article
https://webkitgtk.org/security/WSA-2023-0010.html
report
https://access.redhat.com/security/cve/CVE-2023-42875
report
https://bugzilla.redhat.com/show_bug.cgi?id=2366497
advisory
https://www.cve.org/CVERecord?id=CVE-2023-42875
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-42875
article
https://webkitgtk.org/security/WSA-2025-0004.html
report
https://access.redhat.com/security/cve/CVE-2023-42917
advisory
https://www.cve.org/CVERecord?id=CVE-2023-42917
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-42917
article
https://webkitgtk.org/security/WSA-2023-0011.html
article
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
report
https://access.redhat.com/security/cve/CVE-2023-42970
report
https://bugzilla.redhat.com/show_bug.cgi?id=2366498
advisory
https://www.cve.org/CVERecord?id=CVE-2023-42970

Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 19

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16…

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macO…

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macO…

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8…

The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macO…

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma …

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able …

References