ALSA-2024:9553
- Source
- https://errata.almalinux.org/9/ALSA-2024-9553.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux9/ALSA-2024:9553.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2024:9553
- Related
- Published
- 2024-11-13T00:00:00Z
- Modified
- 2024-11-18T11:52:36Z
- Summary
- Important: webkit2gtk3 security update
- Details
-
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
- webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)
- webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)
- webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185)
- webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44244)
- webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2024-44296)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
-
- https://access.redhat.com/errata/RHSA-2024:9553
- https://access.redhat.com/security/cve/CVE-2024-40866
- https://access.redhat.com/security/cve/CVE-2024-44185
- https://access.redhat.com/security/cve/CVE-2024-44187
- https://access.redhat.com/security/cve/CVE-2024-44244
- https://access.redhat.com/security/cve/CVE-2024-44296
- https://bugzilla.redhat.com/2312724
- https://bugzilla.redhat.com/2314706
- https://bugzilla.redhat.com/2323263
- https://bugzilla.redhat.com/2323278
- https://bugzilla.redhat.com/2323289
- https://errata.almalinux.org/9/ALSA-2024-9553.html
Affected packages
AlmaLinux:9 / webkit2gtk3
Package
- Name
- webkit2gtk3
AlmaLinux:9 / webkit2gtk3-devel
Package
- Name
- webkit2gtk3-devel
AlmaLinux:9 / webkit2gtk3-jsc
Package
- Name
- webkit2gtk3-jsc