Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 5

• High 8.8
  CVE-2023-42950

  A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi
  Mar 28, 2024
• High 8.8
  CVE-2023-43010

  The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Mar 12, 2026
• High 7.5
  CVE-2023-42843

  An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 an…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Feb 21, 2024
• High 7.5
  CVE-2024-4558

  Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

  Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi
  May 7, 2024
• Medium 6.5
  CVE-2023-42956

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, ma…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Mar 28, 2024

References

• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271717
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271718
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2271719
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2279689
• article
  https://issues.redhat.com/browse/RHEL-32578
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9144.json
• report
  https://access.redhat.com/security/cve/CVE-2023-42843
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42843
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42843
• article
  https://webkitgtk.org/security/WSA-2024-0002.html
• report
  https://access.redhat.com/security/cve/CVE-2023-42950
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42950
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42950
• report
  https://access.redhat.com/security/cve/CVE-2023-42956
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42956
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42956
• report
  https://access.redhat.com/security/cve/CVE-2023-43010
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2448778
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-43010
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-43010
• article
  https://webkitgtk.org/security/WSA-2026-0001.html
• report
  https://access.redhat.com/security/cve/CVE-2024-4558
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-4558
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-4558