RHSA-2024:9636 — Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Release	Package	Fixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3	0:2.46.3-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-debuginfo	0:2.46.3-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-debugsource	0:2.46.3-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-devel	0:2.46.3-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-devel-debuginfo	0:2.46.3-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc	0:2.46.3-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-debuginfo	0:2.46.3-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-devel	0:2.46.3-1.el8_10
Red Hat · RHEL 8 enterprise_linux:8::appstream	webkit2gtk3-jsc-devel-debuginfo	0:2.46.3-1.el8_10

Vulnerabilities 21

Medium 5.5

CVE-2024-27834 Exploited

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

May 13, 2024
KEV Nov 4, 2026
Critical 9.8

CVE-2024-40782

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
High 8.8

CVE-2023-42950

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Mar 28, 2024
High 8.8

CVE-2023-43010

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Mar 12, 2026
High 8.8

CVE-2024-54534

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Dec 11, 2024
High 8.1

CVE-2025-43480

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Nov 4, 2025
High 7.8

CVE-2024-27856

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jan 15, 2025
High 7.5

CVE-2024-27820

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
High 7.5

CVE-2024-27851

The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
High 7.5

CVE-2024-4558

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium Browsers Debian Ubuntu Alpine Wolfi

May 7, 2024
High 7.3

CVE-2024-23271

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS S…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Apr 24, 2024
Medium 6.5

CVE-2024-27838

The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jun 10, 2024
Medium 6.5

CVE-2024-40780

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40789

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 6.5

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious webs…

Apple macOS Safari qtwebkit-source macOS Browsers Debian Ubuntu

Sep 16, 2024
Medium 6.5

CVE-2024-44187

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. Thi…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Sep 16, 2024
Medium 6.5

CVE-2024-54658

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, ma…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Feb 10, 2025
Medium 5.5

CVE-2024-40779

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 29, 2024
Medium 5.5

CVE-2024-44185

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 24, 2024
Medium 5.4

CVE-2024-44296

The issue was addressed with improved checks. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 28, 2024
Medium 4.3

CVE-2024-44244

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 an…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Oct 28, 2024

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2279689
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302067
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302069
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302070
report
https://bugzilla.redhat.com/show_bug.cgi?id=2302071
report
https://bugzilla.redhat.com/show_bug.cgi?id=2312724
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314696
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314698
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314702
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314704
report
https://bugzilla.redhat.com/show_bug.cgi?id=2314706
report
https://bugzilla.redhat.com/show_bug.cgi?id=2323263
report
https://bugzilla.redhat.com/show_bug.cgi?id=2323278
report
https://bugzilla.redhat.com/show_bug.cgi?id=2323289
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9636.json
report
https://access.redhat.com/security/cve/CVE-2023-42950
report
https://bugzilla.redhat.com/show_bug.cgi?id=2271718
advisory
https://www.cve.org/CVERecord?id=CVE-2023-42950
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-42950
article
https://webkitgtk.org/security/WSA-2024-0002.html
report
https://access.redhat.com/security/cve/CVE-2023-43010
report
https://bugzilla.redhat.com/show_bug.cgi?id=2448778
advisory
https://www.cve.org/CVERecord?id=CVE-2023-43010
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-43010
article
https://webkitgtk.org/security/WSA-2026-0001.html
report
https://access.redhat.com/security/cve/CVE-2024-4558
advisory
https://www.cve.org/CVERecord?id=CVE-2024-4558
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-4558
report
https://access.redhat.com/security/cve/CVE-2024-23271
advisory
https://www.cve.org/CVERecord?id=CVE-2024-23271
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-23271
article
https://webkitgtk.org/security/WSA-2024-0005.html
report
https://access.redhat.com/security/cve/CVE-2024-27820
advisory
https://www.cve.org/CVERecord?id=CVE-2024-27820
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-27820
report
https://access.redhat.com/security/cve/CVE-2024-27834
report
https://bugzilla.redhat.com/show_bug.cgi?id=2282412
advisory
https://www.cve.org/CVERecord?id=CVE-2024-27834

Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 21

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 17.6, iOS 16.7.9 an…

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and …

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14…

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

The issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe…

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.…

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8…

The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macO…

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap …

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS S…

The issue was addressed by adding additional logic. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, i…

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7…

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious webs…

A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. Thi…

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, ma…

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and i…

The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

The issue was addressed with improved checks. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.…

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 an…

References