RLSA-2023:4201 — Important: webkit2gtk3 security update

Summary

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-32435)

* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2023-32439)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

Release	Package	Fixed in
Rocky Linux · 9	webkit2gtk3	0:2.38.5-1.el9_2.3

Vulnerabilities 3

High 8.8

CVE-2023-32435 Exploited EPSS 23%

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safa…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jun 23, 2023
KEV Jun 23, 2023
High 8.8

CVE-2023-32439 Exploited EPSS 24%

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Jun 23, 2023
KEV Jun 23, 2023
High 8.8

CVE-2023-37450 Exploited EPSS 19%

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Jul 26, 2023
KEV Jul 13, 2023

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2218626
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218640

Important: webkit2gtk3 security update

Summary

Fixed packages 1

Vulnerabilities 3

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safa…

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.…

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6…

References