Red Hat Security Advisory: webkit2gtk3 security update

Fixed packages 9

Vulnerabilities 5

• High 8.8
  CVE-2024-23222 Exploited Public exploit EPSS 11%

  A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15…

  Apple macOS iOS and iPadOS tvOS macOS iOS Browsers Debian Ubuntu
  Jan 23, 2024

  KEV Jan 23, 2024
• High 7.5
  CVE-2024-27808

  The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, ma…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• High 7.5
  CVE-2024-27833

  An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iP…

  Apple iOS and iPadOS tvOS visionOS iOS Browsers Debian Ubuntu
  Jun 10, 2024
• Medium 5.5
  CVE-2024-44185

  The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonom…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 24, 2024
• Medium 4.3
  CVE-2024-44244

  A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 an…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Oct 28, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2259893
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314697
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2314700
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2323263
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2323278
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9638.json
• report
  https://access.redhat.com/security/cve/CVE-2024-23222
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-23222
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-23222
• article
  https://webkitgtk.org/security/WSA-2024-0001.html
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2024-27808
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27808
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27808
• article
  https://webkitgtk.org/security/WSA-2024-0005.html
• report
  https://access.redhat.com/security/cve/CVE-2024-27833
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27833
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27833
• report
  https://access.redhat.com/security/cve/CVE-2024-44185
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-44185
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-44185
• article
  https://webkitgtk.org/security/WSA-2024-0006.html
• report
  https://access.redhat.com/security/cve/CVE-2024-44244
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-44244
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-44244