Vulnerability-Lookup

CVE-2022-42824 (GCVE-0-2022-42824)

Vulnerability from cvelistv5 – Published: 2022-11-01 00:00 – Updated: 2025-04-21 15:32

Summary

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.

Severity ?

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE

Processing maliciously crafted web content may disclose sensitive user information

Assigner

apple

References

13 references

URL	Tags
https://support.apple.com/en-us/HT213488
https://support.apple.com/en-us/HT213489
https://support.apple.com/en-us/HT213492
https://support.apple.com/en-us/HT213495
https://support.apple.com/en-us/HT213491
http://www.openwall.com/lists/oss-security/2022/11/04/4	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://www.debian.org/security/2022/dsa-5273	vendor-advisory
https://www.debian.org/security/2022/dsa-5274	vendor-advisory
https://lists.debian.org/debian-lts-announce/2022…	mailing-list
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202305-32	vendor-advisory

Impacted products

5 products

Vendor	Product	Version
Apple	macOS	Affected: unspecified , < 13 (custom)
Apple	tvOS	Affected: unspecified , < 16.1 (custom)
Apple	tvOS	Affected: unspecified , < 16.1 (custom)
Apple	tvOS	Affected: unspecified , < 16.1 (custom)
Apple	watchOS	Affected: unspecified , < 9.1 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T13:19:04.809Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213488"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213489"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213492"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213495"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213491"
          },
          {
            "name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
          },
          {
            "name": "FEDORA-2022-08fdc4138a",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/"
          },
          {
            "name": "DSA-5273",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5273"
          },
          {
            "name": "DSA-5274",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2022/dsa-5274"
          },
          {
            "name": "[debian-lts-announce] 20221109 [SECURITY] [DLA 3183-1] webkit2gtk security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html"
          },
          {
            "name": "FEDORA-2022-ce32af66d6",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/"
          },
          {
            "name": "FEDORA-2022-e7726761c4",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/"
          },
          {
            "name": "GLSA-202305-32",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202305-32"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-42824",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-21T15:32:34.126504Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-21T15:32:51.273Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "9.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may disclose sensitive user information",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-30T00:00:00.000Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213488"
        },
        {
          "url": "https://support.apple.com/en-us/HT213489"
        },
        {
          "url": "https://support.apple.com/en-us/HT213492"
        },
        {
          "url": "https://support.apple.com/en-us/HT213495"
        },
        {
          "url": "https://support.apple.com/en-us/HT213491"
        },
        {
          "name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
          "tags": [
            "mailing-list"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
        },
        {
          "name": "FEDORA-2022-08fdc4138a",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/"
        },
        {
          "name": "DSA-5273",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5273"
        },
        {
          "name": "DSA-5274",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.debian.org/security/2022/dsa-5274"
        },
        {
          "name": "[debian-lts-announce] 20221109 [SECURITY] [DLA 3183-1] webkit2gtk security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html"
        },
        {
          "name": "FEDORA-2022-ce32af66d6",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/"
        },
        {
          "name": "FEDORA-2022-e7726761c4",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/"
        },
        {
          "name": "GLSA-202305-32",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202305-32"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2022-42824",
    "datePublished": "2022-11-01T00:00:00.000Z",
    "dateReserved": "2022-10-11T00:00:00.000Z",
    "dateUpdated": "2025-04-21T15:32:51.273Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-42824",
      "date": "2026-05-19",
      "epss": "0.00033",
      "percentile": "0.09737"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"16.1\", \"matchCriteriaId\": \"1E24164C-68FC-4038-9FE4-5A7841DD092C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"16.0\", \"matchCriteriaId\": \"8CA5BE49-4E08-4ABB-BF4B-03147ED85DDD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"16.1\", \"matchCriteriaId\": \"E7CF2D18-109B-40A0-96F0-79894CE484AC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"13.0\", \"matchCriteriaId\": \"71E032AD-F827-4944-9699-BB1E6D4233FC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"16.1\", \"matchCriteriaId\": \"F3B857D6-19FE-4535-9BA2-6BD54B9BB6F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"9.1\", \"matchCriteriaId\": \"32BABE0E-193A-4A4D-96E9-84BB48649C9A\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.\"}, {\"lang\": \"es\", \"value\": \"Se abord\\u00f3 un problema l\\u00f3gico con una mejor gesti\\u00f3n del estado. Este problema se solucion\\u00f3 en tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 y iPadOS 16. El procesamiento de contenido web creado con fines malintencionados puede revelar informaci\\u00f3n confidencial del usuario.\"}]",
      "id": "CVE-2022-42824",
      "lastModified": "2024-11-21T07:25:25.203",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2022-11-01T20:15:24.167",
      "references": "[{\"url\": \"http://www.openwall.com/lists/oss-security/2022/11/04/4\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html\", \"source\": \"product-security@apple.com\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/\", \"source\": \"product-security@apple.com\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/\", \"source\": \"product-security@apple.com\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/\", \"source\": \"product-security@apple.com\"}, {\"url\": \"https://security.gentoo.org/glsa/202305-32\", \"source\": \"product-security@apple.com\"}, {\"url\": \"https://support.apple.com/en-us/HT213488\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT213489\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT213491\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT213492\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT213495\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.debian.org/security/2022/dsa-5273\", \"source\": \"product-security@apple.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2022/dsa-5274\", \"source\": \"product-security@apple.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2022/11/04/4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/202305-32\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://support.apple.com/en-us/HT213488\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT213489\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT213491\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT213492\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT213495\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.debian.org/security/2022/dsa-5273\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2022/dsa-5274\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
      "sourceIdentifier": "product-security@apple.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-42824\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2022-11-01T20:15:24.167\",\"lastModified\":\"2025-04-21T16:15:51.440\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.\"},{\"lang\":\"es\",\"value\":\"Se abord\u00f3 un problema l\u00f3gico con una mejor gesti\u00f3n del estado. Este problema se solucion\u00f3 en tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 y iPadOS 16. El procesamiento de contenido web creado con fines malintencionados puede revelar informaci\u00f3n confidencial del usuario.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"16.1\",\"matchCriteriaId\":\"1E24164C-68FC-4038-9FE4-5A7841DD092C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"16.0\",\"matchCriteriaId\":\"8CA5BE49-4E08-4ABB-BF4B-03147ED85DDD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"16.1\",\"matchCriteriaId\":\"E7CF2D18-109B-40A0-96F0-79894CE484AC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"13.0\",\"matchCriteriaId\":\"71E032AD-F827-4944-9699-BB1E6D4233FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"16.1\",\"matchCriteriaId\":\"F3B857D6-19FE-4535-9BA2-6BD54B9BB6F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.1\",\"matchCriteriaId\":\"32BABE0E-193A-4A4D-96E9-84BB48649C9A\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2022/11/04/4\",\"source\":\"product-security@apple.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html\",\"source\":\"product-security@apple.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://security.gentoo.org/glsa/202305-32\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/HT213488\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT213489\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT213491\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT213492\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT213495\",\"source\":\"product-security@apple.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.debian.org/security/2022/dsa-5273\",\"source\":\"product-security@apple.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2022/dsa-5274\",\"source\":\"product-security@apple.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2022/11/04/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202305-32\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://support.apple.com/en-us/HT213488\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT213489\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT213491\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT213492\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT213495\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.debian.org/security/2022/dsa-5273\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2022/dsa-5274\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://support.apple.com/en-us/HT213488\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT213489\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT213492\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT213495\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT213491\", \"tags\": [\"x_transferred\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2022/11/04/4\", \"name\": \"[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/\", \"name\": \"FEDORA-2022-08fdc4138a\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2022/dsa-5273\", \"name\": \"DSA-5273\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://www.debian.org/security/2022/dsa-5274\", \"name\": \"DSA-5274\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html\", \"name\": \"[debian-lts-announce] 20221109 [SECURITY] [DLA 3183-1] webkit2gtk security update\", \"tags\": [\"mailing-list\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/\", \"name\": \"FEDORA-2022-ce32af66d6\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/\", \"name\": \"FEDORA-2022-e7726761c4\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}, {\"url\": \"https://security.gentoo.org/glsa/202305-32\", \"name\": \"GLSA-202305-32\", \"tags\": [\"vendor-advisory\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T13:19:04.809Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-42824\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-04-21T15:32:34.126504Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"description\": \"CWE-noinfo Not enough information\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-04-21T15:32:22.377Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"13\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"16.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"16.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"16.1\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"9.1\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/HT213488\"}, {\"url\": \"https://support.apple.com/en-us/HT213489\"}, {\"url\": \"https://support.apple.com/en-us/HT213492\"}, {\"url\": \"https://support.apple.com/en-us/HT213495\"}, {\"url\": \"https://support.apple.com/en-us/HT213491\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2022/11/04/4\", \"name\": \"[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/\", \"name\": \"FEDORA-2022-08fdc4138a\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.debian.org/security/2022/dsa-5273\", \"name\": \"DSA-5273\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.debian.org/security/2022/dsa-5274\", \"name\": \"DSA-5274\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html\", \"name\": \"[debian-lts-announce] 20221109 [SECURITY] [DLA 3183-1] webkit2gtk security update\", \"tags\": [\"mailing-list\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/\", \"name\": \"FEDORA-2022-ce32af66d6\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/\", \"name\": \"FEDORA-2022-e7726761c4\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://security.gentoo.org/glsa/202305-32\", \"name\": \"GLSA-202305-32\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Processing maliciously crafted web content may disclose sensitive user information\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2023-05-30T00:00:00.000Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-42824\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-04-21T15:32:51.273Z\", \"dateReserved\": \"2022-10-11T00:00:00.000Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2022-11-01T00:00:00.000Z\", \"assignerShortName\": \"apple\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2022-AVI-947

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire à distance et un déni de service à distance.

Apple indique que la vulnérabilité CVE-2022-42827 serait activement exploitée.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Apple	N/A	watchOS versions antérieures à 9.1
Apple	N/A	iPadOS versions antérieures à 16
Apple	macOS	macOS Monterey versions antérieures à 12.6.1
Apple	Safari	Safari versions antérieures à 16.1
Apple	macOS	macOS Ventura versions antérieures à 13
Apple	N/A	iOS versions antérieures à 16.1
Apple	macOS	macOS Big Sur versions antérieures à 11.7.1
Apple	N/A	tvOS versions antérieures à 16.1

References

Title

Publication Time

CERTFR-2022-AVI-947

Vulnerability from certfr_avis - Published: - Updated:

Apple indique que la vulnérabilité CVE-2022-42827 serait activement exploitée.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Apple	N/A	watchOS versions antérieures à 9.1
Apple	N/A	iPadOS versions antérieures à 16
Apple	macOS	macOS Monterey versions antérieures à 12.6.1
Apple	Safari	Safari versions antérieures à 16.1
Apple	macOS	macOS Ventura versions antérieures à 13
Apple	N/A	iOS versions antérieures à 16.1
Apple	macOS	macOS Big Sur versions antérieures à 11.7.1
Apple	N/A	tvOS versions antérieures à 16.1

References

Title

Publication Time

alsa-2023:2256

Vulnerability from osv_almalinux

Published

2023-05-09 00:00

Modified

2023-05-12 09:20

Summary

Important: webkit2gtk3 security and bug fix update

Details

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)
webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)
webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)
webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)
webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)
webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)
webkitgtk: sensitive information disclosure issue (CVE-2022-42824)
webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)
webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)
webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)
webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2023:2256	ADVISORY
	https://access.redhat.com/security/cve/CVE-2022-32886	REPORT
	https://access.redhat.com/security/cve/CVE-2022-32888	REPORT
	https://access.redhat.com/security/cve/CVE-2022-32923	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42799	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42823	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42824	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42826	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42852	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42863	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42867	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46691	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46692	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46698	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46699	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46700	REPORT
	https://access.redhat.com/security/cve/CVE-2023-23517	REPORT
	https://access.redhat.com/security/cve/CVE-2023-23518	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25358	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25360	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25361	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25362	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25363	REPORT
	https://bugzilla.redhat.com/2128643	REPORT
	https://bugzilla.redhat.com/2140501	REPORT
	https://bugzilla.redhat.com/2140502	REPORT
	https://bugzilla.redhat.com/2140503	REPORT
	https://bugzilla.redhat.com/2140504	REPORT
	https://bugzilla.redhat.com/2140505	REPORT
	https://bugzilla.redhat.com/2156986	REPORT
	https://bugzilla.redhat.com/2156987	REPORT
	https://bugzilla.redhat.com/2156989	REPORT
	https://bugzilla.redhat.com/2156990	REPORT
	https://bugzilla.redhat.com/2156991	REPORT
	https://bugzilla.redhat.com/2156992	REPORT
	https://bugzilla.redhat.com/2156993	REPORT
	https://bugzilla.redhat.com/2156994	REPORT
	https://bugzilla.redhat.com/2167715	REPORT
	https://bugzilla.redhat.com/2167716	REPORT
	https://bugzilla.redhat.com/2167717	REPORT
	https://bugzilla.redhat.com/2175099	REPORT
	https://bugzilla.redhat.com/2175101	REPORT
	https://bugzilla.redhat.com/2175103	REPORT
	https://bugzilla.redhat.com/2175105	REPORT
	https://bugzilla.redhat.com/2175107	REPORT
	https://errata.almalinux.org/9/ALSA-2023-2256.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38.5-1.el9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38.5-1.el9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-jsc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38.5-1.el9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-jsc-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38.5-1.el9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)\n* webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)\n* webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)\n* webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)\n* webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)\n* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)\n* webkitgtk: sensitive information disclosure issue (CVE-2022-42824)\n* webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)\n* webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)\n* webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.",
  "id": "ALSA-2023:2256",
  "modified": "2023-05-12T09:20:55Z",
  "published": "2023-05-09T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2023:2256"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32886"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32888"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32923"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42799"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42823"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42824"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42826"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42852"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42863"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42867"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46691"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46692"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46698"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46699"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46700"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-23517"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-23518"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25358"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25360"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25361"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25362"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25363"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2128643"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140501"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140502"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140503"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140504"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140505"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156986"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156987"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156989"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156990"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156991"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156992"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156993"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156994"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2167715"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2167716"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2167717"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175099"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175101"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175103"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175105"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175107"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2023-2256.html"
    }
  ],
  "related": [
    "CVE-2022-42826",
    "CVE-2023-23517",
    "CVE-2023-23518",
    "CVE-2022-32886",
    "CVE-2022-32888",
    "CVE-2022-32923",
    "CVE-2022-42799",
    "CVE-2022-42823",
    "CVE-2022-42824",
    "CVE-2022-42852",
    "CVE-2022-42863",
    "CVE-2022-42867",
    "CVE-2022-46691",
    "CVE-2022-46692",
    "CVE-2022-46698",
    "CVE-2022-46699",
    "CVE-2022-46700",
    "CVE-2023-25358",
    "CVE-2023-25360",
    "CVE-2023-25361",
    "CVE-2023-25362",
    "CVE-2023-25363"
  ],
  "summary": "Important: webkit2gtk3 security and bug fix update"
}

alsa-2023:2834

Vulnerability from osv_almalinux

Published

2023-05-16 00:00

Modified

2023-05-19 22:03

Summary

Important: webkit2gtk3 security and bug fix update

Details

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)
webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)
webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)
webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)
webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)
webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)
webkitgtk: sensitive information disclosure issue (CVE-2022-42824)
webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)
webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)
webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)
webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)
webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)
webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2023:2834	ADVISORY
	https://access.redhat.com/security/cve/CVE-2022-32886	REPORT
	https://access.redhat.com/security/cve/CVE-2022-32888	REPORT
	https://access.redhat.com/security/cve/CVE-2022-32923	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42799	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42823	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42824	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42826	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42852	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42863	REPORT
	https://access.redhat.com/security/cve/CVE-2022-42867	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46691	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46692	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46698	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46699	REPORT
	https://access.redhat.com/security/cve/CVE-2022-46700	REPORT
	https://access.redhat.com/security/cve/CVE-2023-23517	REPORT
	https://access.redhat.com/security/cve/CVE-2023-23518	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25358	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25360	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25361	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25362	REPORT
	https://access.redhat.com/security/cve/CVE-2023-25363	REPORT
	https://bugzilla.redhat.com/2128643	REPORT
	https://bugzilla.redhat.com/2140501	REPORT
	https://bugzilla.redhat.com/2140502	REPORT
	https://bugzilla.redhat.com/2140503	REPORT
	https://bugzilla.redhat.com/2140504	REPORT
	https://bugzilla.redhat.com/2140505	REPORT
	https://bugzilla.redhat.com/2156986	REPORT
	https://bugzilla.redhat.com/2156987	REPORT
	https://bugzilla.redhat.com/2156989	REPORT
	https://bugzilla.redhat.com/2156990	REPORT
	https://bugzilla.redhat.com/2156991	REPORT
	https://bugzilla.redhat.com/2156992	REPORT
	https://bugzilla.redhat.com/2156993	REPORT
	https://bugzilla.redhat.com/2156994	REPORT
	https://bugzilla.redhat.com/2167715	REPORT
	https://bugzilla.redhat.com/2167716	REPORT
	https://bugzilla.redhat.com/2167717	REPORT
	https://bugzilla.redhat.com/2175099	REPORT
	https://bugzilla.redhat.com/2175101	REPORT
	https://bugzilla.redhat.com/2175103	REPORT
	https://bugzilla.redhat.com/2175105	REPORT
	https://bugzilla.redhat.com/2175107	REPORT
	https://errata.almalinux.org/8/ALSA-2023-2834.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "webkit2gtk3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38.5-1.el8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "webkit2gtk3-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38.5-1.el8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "webkit2gtk3-jsc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38.5-1.el8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "webkit2gtk3-jsc-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.38.5-1.el8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)\n* webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)\n* webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)\n* webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)\n* webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)\n* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)\n* webkitgtk: sensitive information disclosure issue (CVE-2022-42824)\n* webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)\n* webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)\n* webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.",
  "id": "ALSA-2023:2834",
  "modified": "2023-05-19T22:03:35Z",
  "published": "2023-05-16T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2023:2834"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32886"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32888"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-32923"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42799"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42823"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42824"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42826"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42852"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42863"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-42867"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46691"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46692"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46698"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46699"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2022-46700"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-23517"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-23518"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25358"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25360"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25361"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25362"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2023-25363"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2128643"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140501"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140502"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140503"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140504"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2140505"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156986"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156987"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156989"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156990"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156991"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156992"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156993"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2156994"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2167715"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2167716"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2167717"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175099"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175101"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175103"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175105"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2175107"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/8/ALSA-2023-2834.html"
    }
  ],
  "related": [
    "CVE-2022-42826",
    "CVE-2023-23517",
    "CVE-2023-23518",
    "CVE-2022-32886",
    "CVE-2022-32888",
    "CVE-2022-32923",
    "CVE-2022-42799",
    "CVE-2022-42823",
    "CVE-2022-42824",
    "CVE-2022-42852",
    "CVE-2022-42863",
    "CVE-2022-42867",
    "CVE-2022-46691",
    "CVE-2022-46692",
    "CVE-2022-46698",
    "CVE-2022-46699",
    "CVE-2022-46700",
    "CVE-2023-25358",
    "CVE-2023-25360",
    "CVE-2023-25361",
    "CVE-2023-25362",
    "CVE-2023-25363"
  ],
  "summary": "Important: webkit2gtk3 security and bug fix update"
}

BDU:2024-07337

Vulnerability from fstec - Published: 11.09.2022

Title

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit, связанная с ошибками управления состоянием, позволяющая нарушителю получить доступ к конфиденциальным данным

Description

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit связана с ошибками управления состоянием. Эксплуатация уязвимости позволяет нарушителю получить доступ к конфиденциальным данным

Severity ?


                    
                      AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Vendor

Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», АО "НППКТ"

Software Name

Debian GNU/Linux, Astra Linux Special Edition (запись в едином реестре российских программ №369), ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), WPE WebKit, WebKitGTK

Software Version

10 (Debian GNU/Linux), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 1.7 (Astra Linux Special Edition), до 2.7 (ОСОН ОСнова Оnyx), до 2.38.2 (WPE WebKit), до 2.38.2 (WebKitGTK)

Possible Mitigations

Для WebKitGTK и WPE WebKit: использование рекомендаций производителя: https://wpewebkit.org/security/WSA-2022-0010.html Для Debian: использование рекомендаций производителя: https://security-tracker.debian.org/tracker/CVE-2022-42824 Для ОС Astra Linux: обновить пакет webkit2gtk до 2.38.5-1~deb10u1 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD Для ОСОН ОСнова Оnyx: Обновление программного обеспечения webkit2gtk до версии 2.38.3-1~deb10u1

Reference

http://www.openwall.com/lists/oss-security/2022/11/04/4 https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html https://nvd.nist.gov/vuln/detail/CVE-2022-42824 https://security-tracker.debian.org/tracker/CVE-2022-42824 https://support.apple.com/en-us/HT213488 https://support.apple.com/en-us/HT213489 https://support.apple.com/en-us/HT213491 https://support.apple.com/en-us/HT213492 https://support.apple.com/en-us/HT213495 https://webkitgtk.org/security/WSA-2022-0010.html https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD https://wpewebkit.org/security/WSA-2022-0010.html https://www.debian.org/security/2022/dsa-5273 https://www.debian.org/security/2022/dsa-5274 https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.7/

CWE

CWE-371

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\"",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "10 (Debian GNU/Linux), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 1.7 (Astra Linux Special Edition), \u0434\u043e 2.7 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), \u0434\u043e 2.38.2 (WPE WebKit), \u0434\u043e 2.38.2 (WebKitGTK)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0414\u043b\u044f WebKitGTK \u0438 WPE WebKit:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wpewebkit.org/security/WSA-2022-0010.html\n\u0414\u043b\u044f Debian:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://security-tracker.debian.org/tracker/CVE-2022-42824\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 webkit2gtk \u0434\u043e 2.38.5-1~deb10u1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx: \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f webkit2gtk \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.38.3-1~deb10u1",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "11.09.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "06.11.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "23.09.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-07337",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-42824",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), WPE WebKit, WebKitGTK",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 12 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\" \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.7  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 WebKitGTK \u0438 WPE WebKit, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c (CWE-371)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 WebKitGTK \u0438 WPE WebKit \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.openwall.com/lists/oss-security/2022/11/04/4\nhttps://lists.debian.org/debian-lts-announce/2022/11/msg00010.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-42824\nhttps://security-tracker.debian.org/tracker/CVE-2022-42824\nhttps://support.apple.com/en-us/HT213488\nhttps://support.apple.com/en-us/HT213489\nhttps://support.apple.com/en-us/HT213491\nhttps://support.apple.com/en-us/HT213492\nhttps://support.apple.com/en-us/HT213495\nhttps://webkitgtk.org/security/WSA-2022-0010.html\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD\nhttps://wpewebkit.org/security/WSA-2022-0010.html\nhttps://www.debian.org/security/2022/dsa-5273\nhttps://www.debian.org/security/2022/dsa-5274\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.7/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-371",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,9)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}

FKIE_CVE-2022-42824

Vulnerability from fkie_nvd - Published: 2022-11-01 20:15 - Updated: 2025-04-21 16:15

Severity ?

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Summary

References

URL	Tags
product-security@apple.com	http://www.openwall.com/lists/oss-security/2022/11/04/4	Mailing List, Third Party Advisory
product-security@apple.com	https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html	Mailing List, Third Party Advisory
product-security@apple.com	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
product-security@apple.com	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/
product-security@apple.com	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/
product-security@apple.com	https://security.gentoo.org/glsa/202305-32
product-security@apple.com	https://support.apple.com/en-us/HT213488	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/HT213489	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/HT213491	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/HT213492	Vendor Advisory
product-security@apple.com	https://support.apple.com/en-us/HT213495	Vendor Advisory
product-security@apple.com	https://www.debian.org/security/2022/dsa-5273	Third Party Advisory
product-security@apple.com	https://www.debian.org/security/2022/dsa-5274	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2022/11/04/4	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/
af854a3a-2127-422b-91ae-364da2661108	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/
af854a3a-2127-422b-91ae-364da2661108	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/
af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/202305-32
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT213488	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT213489	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT213491	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT213492	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT213495	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.debian.org/security/2022/dsa-5273	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.debian.org/security/2022/dsa-5274	Third Party Advisory

Impacted products

Vendor	Product	Version
apple	safari	*
apple	ipados	*
apple	iphone_os	*
apple	macos	*
apple	tvos	*
apple	watchos	*
fedoraproject	fedora	35
fedoraproject	fedora	36
fedoraproject	fedora	37
debian	debian_linux	10.0
debian	debian_linux	11.0

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E24164C-68FC-4038-9FE4-5A7841DD092C",
              "versionEndExcluding": "16.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CA5BE49-4E08-4ABB-BF4B-03147ED85DDD",
              "versionEndExcluding": "16.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E7CF2D18-109B-40A0-96F0-79894CE484AC",
              "versionEndExcluding": "16.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "71E032AD-F827-4944-9699-BB1E6D4233FC",
              "versionEndExcluding": "13.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3B857D6-19FE-4535-9BA2-6BD54B9BB6F5",
              "versionEndExcluding": "16.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "32BABE0E-193A-4A4D-96E9-84BB48649C9A",
              "versionEndExcluding": "9.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
              "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
              "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information."
    },
    {
      "lang": "es",
      "value": "Se abord\u00f3 un problema l\u00f3gico con una mejor gesti\u00f3n del estado. Este problema se solucion\u00f3 en tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 y iPadOS 16. El procesamiento de contenido web creado con fines malintencionados puede revelar informaci\u00f3n confidencial del usuario."
    }
  ],
  "id": "CVE-2022-42824",
  "lastModified": "2025-04-21T16:15:51.440",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2022-11-01T20:15:24.167",
  "references": [
    {
      "source": "product-security@apple.com",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://security.gentoo.org/glsa/202305-32"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213488"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213489"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213491"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213492"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213495"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2022/dsa-5273"
    },
    {
      "source": "product-security@apple.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2022/dsa-5274"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.gentoo.org/glsa/202305-32"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213488"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213489"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213491"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213492"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT213495"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2022/dsa-5273"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://www.debian.org/security/2022/dsa-5274"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-CJWX-H5PW-CHVG

Vulnerability from github – Published: 2022-11-02 12:00 – Updated: 2025-04-21 18:32

Details

Severity ?

5.5 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-42824"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-11-01T20:15:00Z",
    "severity": "MODERATE"
  },
  "details": "A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.",
  "id": "GHSA-cjwx-h5pw-chvg",
  "modified": "2025-04-21T18:32:07Z",
  "published": "2022-11-02T12:00:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42824"
    },
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY"
    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/202305-32"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213488"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213489"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213491"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213492"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213495"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2022/dsa-5273"
    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2022/dsa-5274"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2022-42824

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2022-42824

Aliases

CVE-2022-42824

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-42824",
    "description": "A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.",
    "id": "GSD-2022-42824",
    "references": [
      "https://www.debian.org/security/2022/dsa-5273",
      "https://www.debian.org/security/2022/dsa-5274",
      "https://advisories.mageia.org/CVE-2022-42824.html",
      "https://www.suse.com/security/cve/CVE-2022-42824.html",
      "https://ubuntu.com/security/CVE-2022-42824"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-42824"
      ],
      "details": "A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information.",
      "id": "GSD-2022-42824",
      "modified": "2023-12-13T01:19:10.603606Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "product-security@apple.com",
        "ID": "CVE-2022-42824",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "macOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "13"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "tvOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "16.1"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "tvOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "16.1"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "tvOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "16.1"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "watchOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "9.1"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Apple"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Processing maliciously crafted web content may disclose sensitive user information"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://support.apple.com/en-us/HT213488",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT213488"
          },
          {
            "name": "https://support.apple.com/en-us/HT213489",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT213489"
          },
          {
            "name": "https://support.apple.com/en-us/HT213492",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT213492"
          },
          {
            "name": "https://support.apple.com/en-us/HT213495",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT213495"
          },
          {
            "name": "https://support.apple.com/en-us/HT213491",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT213491"
          },
          {
            "name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
          },
          {
            "name": "FEDORA-2022-08fdc4138a",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/"
          },
          {
            "name": "DSA-5273",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2022/dsa-5273"
          },
          {
            "name": "DSA-5274",
            "refsource": "DEBIAN",
            "url": "https://www.debian.org/security/2022/dsa-5274"
          },
          {
            "name": "[debian-lts-announce] 20221109 [SECURITY] [DLA 3183-1] webkit2gtk security update",
            "refsource": "MLIST",
            "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html"
          },
          {
            "name": "FEDORA-2022-ce32af66d6",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/"
          },
          {
            "name": "FEDORA-2022-e7726761c4",
            "refsource": "FEDORA",
            "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/"
          },
          {
            "name": "GLSA-202305-32",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/202305-32"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "13.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "9.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.1",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "16.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "product-security@apple.com",
          "ID": "CVE-2022-42824"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.apple.com/en-us/HT213488",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT213488"
            },
            {
              "name": "https://support.apple.com/en-us/HT213495",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT213495"
            },
            {
              "name": "https://support.apple.com/en-us/HT213492",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT213492"
            },
            {
              "name": "https://support.apple.com/en-us/HT213491",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT213491"
            },
            {
              "name": "https://support.apple.com/en-us/HT213489",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://support.apple.com/en-us/HT213489"
            },
            {
              "name": "[oss-security] 20221104 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0010",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2022/11/04/4"
            },
            {
              "name": "FEDORA-2022-08fdc4138a",
              "refsource": "FEDORA",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/"
            },
            {
              "name": "DSA-5274",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2022/dsa-5274"
            },
            {
              "name": "DSA-5273",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2022/dsa-5273"
            },
            {
              "name": "[debian-lts-announce] 20221109 [SECURITY] [DLA 3183-1] webkit2gtk security update",
              "refsource": "MLIST",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html"
            },
            {
              "name": "FEDORA-2022-ce32af66d6",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/"
            },
            {
              "name": "FEDORA-2022-e7726761c4",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/"
            },
            {
              "name": "GLSA-202305-32",
              "refsource": "GENTOO",
              "tags": [],
              "url": "https://security.gentoo.org/glsa/202305-32"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2023-05-30T06:15Z",
      "publishedDate": "2022-11-01T20:15Z"
    }
  }
}

RHSA-2023:2256

Vulnerability from csaf_redhat - Published: 2023-05-09 09:52 - Updated: 2026-01-13 22:05

Summary

Red Hat Security Advisory: webkit2gtk3 security and bug fix update

Severity

Important

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518) * webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886) * webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888) * webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923) * webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799) * webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823) * webkitgtk: sensitive information disclosure issue (CVE-2022-42824) * webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863) * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691) * webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692) * webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2022-32886

A vulnerability was found in webkitgtkm, where a buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-32888

A vulnerability was found in webkitgtk, where an out-of-bounds read was addressed with improved bounds checking. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-32923

A vulnerability was found in webkitgtk. Processing maliciously crafted web content may disclose the internal states of the app.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42799

A vulnerability was found in webkitgtk, where an issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42823

A vulnerability was found in webkitgtk, where a logic issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42824

A vulnerability was found in webkitgtk, where a type confusion issue was addressed with improved memory handling. By this security flaw processing maliciously crafted web content may lead to arbitrary code execution.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42826

A vulnerability was found in WebKitGTK. This issue exists due to a use-after-free error when processing maliciously crafted web content in WebKit. This may allow an attacker to trick the victim to visit a specially crafted website, causing an application to halt, crash, or perform arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2022-42852

A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42863

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42867

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46691

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46692

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46698

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows an attacker to process maliciously crafted web content that may disclose sensitive user information.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46699

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46700

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-48503

A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

CVE-2023-23517

A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. This may allow a remote attacker to create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2023-23518

A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2023-25358

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-25360

A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-25361

A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-25362

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-25363

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

References

129 references

URL	Category
https://access.redhat.com/errata/RHSA-2023:2256	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2127467	external
https://bugzilla.redhat.com/show_bug.cgi?id=2128643	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140501	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140502	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140503	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140504	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140505	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156986	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156987	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156989	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156990	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156991	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156992	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156993	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156994	external
https://bugzilla.redhat.com/show_bug.cgi?id=2167715	external
https://bugzilla.redhat.com/show_bug.cgi?id=2167716	external
https://bugzilla.redhat.com/show_bug.cgi?id=2167717	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175099	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175101	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175103	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175105	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175107	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-32886	self
https://bugzilla.redhat.com/show_bug.cgi?id=2128643	external
https://www.cve.org/CVERecord?id=CVE-2022-32886	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32886	external
https://webkitgtk.org/security/WSA-2022-0009.html	external
https://access.redhat.com/security/cve/CVE-2022-32888	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140501	external
https://www.cve.org/CVERecord?id=CVE-2022-32888	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32888	external
https://webkitgtk.org/security/WSA-2022-0010.html	external
https://access.redhat.com/security/cve/CVE-2022-32923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140502	external
https://www.cve.org/CVERecord?id=CVE-2022-32923	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32923	external
https://access.redhat.com/security/cve/CVE-2022-42799	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140503	external
https://www.cve.org/CVERecord?id=CVE-2022-42799	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42799	external
https://access.redhat.com/security/cve/CVE-2022-42823	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140505	external
https://www.cve.org/CVERecord?id=CVE-2022-42823	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42823	external
https://access.redhat.com/security/cve/CVE-2022-42824	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140504	external
https://www.cve.org/CVERecord?id=CVE-2022-42824	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42824	external
https://access.redhat.com/security/cve/CVE-2022-42826	self
https://bugzilla.redhat.com/show_bug.cgi?id=2167716	external
https://www.cve.org/CVERecord?id=CVE-2022-42826	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42826	external
https://webkitgtk.org/security/WSA-2023-0001.html	external
https://access.redhat.com/security/cve/CVE-2022-42852	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156986	external
https://www.cve.org/CVERecord?id=CVE-2022-42852	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42852	external
https://webkitgtk.org/security/WSA-2022-0011.html	external
https://access.redhat.com/security/cve/CVE-2022-42863	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156987	external
https://www.cve.org/CVERecord?id=CVE-2022-42863	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42863	external
https://access.redhat.com/security/cve/CVE-2022-42867	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156989	external
https://www.cve.org/CVERecord?id=CVE-2022-42867	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42867	external
https://access.redhat.com/security/cve/CVE-2022-46691	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156990	external
https://www.cve.org/CVERecord?id=CVE-2022-46691	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46691	external
https://access.redhat.com/security/cve/CVE-2022-46692	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156991	external
https://www.cve.org/CVERecord?id=CVE-2022-46692	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46692	external
https://access.redhat.com/security/cve/CVE-2022-46698	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156992	external
https://www.cve.org/CVERecord?id=CVE-2022-46698	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46698	external
https://access.redhat.com/security/cve/CVE-2022-46699	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156993	external
https://www.cve.org/CVERecord?id=CVE-2022-46699	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46699	external
https://access.redhat.com/security/cve/CVE-2022-46700	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156994	external
https://www.cve.org/CVERecord?id=CVE-2022-46700	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46700	external
https://access.redhat.com/security/cve/CVE-2022-48503	self
https://bugzilla.redhat.com/show_bug.cgi?id=2218623	external
https://www.cve.org/CVERecord?id=CVE-2022-48503	external
https://nvd.nist.gov/vuln/detail/CVE-2022-48503	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2023-23517	self
https://bugzilla.redhat.com/show_bug.cgi?id=2167717	external
https://www.cve.org/CVERecord?id=CVE-2023-23517	external
https://nvd.nist.gov/vuln/detail/CVE-2023-23517	external
https://access.redhat.com/security/cve/CVE-2023-23518	self
https://bugzilla.redhat.com/show_bug.cgi?id=2167715	external
https://www.cve.org/CVERecord?id=CVE-2023-23518	external
https://nvd.nist.gov/vuln/detail/CVE-2023-23518	external
https://access.redhat.com/security/cve/CVE-2023-25358	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175099	external
https://www.cve.org/CVERecord?id=CVE-2023-25358	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25358	external
https://bugs.webkit.org/show_bug.cgi?id=242683	external
https://access.redhat.com/security/cve/CVE-2023-25360	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175101	external
https://www.cve.org/CVERecord?id=CVE-2023-25360	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25360	external
https://bugs.webkit.org/show_bug.cgi?id=242686	external
https://access.redhat.com/security/cve/CVE-2023-25361	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175103	external
https://www.cve.org/CVERecord?id=CVE-2023-25361	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25361	external
https://bugs.webkit.org/show_bug.cgi?id=244249	external
https://access.redhat.com/security/cve/CVE-2023-25362	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175105	external
https://www.cve.org/CVERecord?id=CVE-2023-25362	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25362	external
https://bugs.webkit.org/show_bug.cgi?id=244802	external
https://access.redhat.com/security/cve/CVE-2023-25363	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175107	external
https://www.cve.org/CVERecord?id=CVE-2023-25363	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25363	external
https://bugs.webkit.org/show_bug.cgi?id=242684	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)\n\n* webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)\n\n* webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)\n\n* webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)\n\n* webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)\n\n* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)\n\n* webkitgtk: sensitive information disclosure issue (CVE-2022-42824)\n\n* webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)\n\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)\n\n* webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)\n\n* webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:2256",
        "url": "https://access.redhat.com/errata/RHSA-2023:2256"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2127467",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2127467"
      },
      {
        "category": "external",
        "summary": "2128643",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128643"
      },
      {
        "category": "external",
        "summary": "2140501",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140501"
      },
      {
        "category": "external",
        "summary": "2140502",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140502"
      },
      {
        "category": "external",
        "summary": "2140503",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140503"
      },
      {
        "category": "external",
        "summary": "2140504",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140504"
      },
      {
        "category": "external",
        "summary": "2140505",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140505"
      },
      {
        "category": "external",
        "summary": "2156986",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156986"
      },
      {
        "category": "external",
        "summary": "2156987",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156987"
      },
      {
        "category": "external",
        "summary": "2156989",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156989"
      },
      {
        "category": "external",
        "summary": "2156990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156990"
      },
      {
        "category": "external",
        "summary": "2156991",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156991"
      },
      {
        "category": "external",
        "summary": "2156992",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156992"
      },
      {
        "category": "external",
        "summary": "2156993",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156993"
      },
      {
        "category": "external",
        "summary": "2156994",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156994"
      },
      {
        "category": "external",
        "summary": "2167715",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167715"
      },
      {
        "category": "external",
        "summary": "2167716",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167716"
      },
      {
        "category": "external",
        "summary": "2167717",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167717"
      },
      {
        "category": "external",
        "summary": "2175099",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175099"
      },
      {
        "category": "external",
        "summary": "2175101",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175101"
      },
      {
        "category": "external",
        "summary": "2175103",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175103"
      },
      {
        "category": "external",
        "summary": "2175105",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175105"
      },
      {
        "category": "external",
        "summary": "2175107",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175107"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2256.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security and bug fix update",
    "tracking": {
      "current_release_date": "2026-01-13T22:05:49+00:00",
      "generator": {
        "date": "2026-01-13T22:05:49+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2023:2256",
      "initial_release_date": "2023-05-09T09:52:48+00:00",
      "revision_history": [
        {
          "date": "2023-05-09T09:52:48+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-05-09T09:52:48+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-13T22:05:49+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.2.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el9.src",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el9.src",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el9.src",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.2.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-32886",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2022-09-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2128643"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtkm, where a buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: buffer overflow issue was addressed with improved memory handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32886"
        },
        {
          "category": "external",
          "summary": "RHBZ#2128643",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128643"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32886",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32886"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32886",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32886"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0009.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0009.html"
        }
      ],
      "release_date": "2022-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: buffer overflow issue was addressed with improved memory handling"
    },
    {
      "cve": "CVE-2022-32888",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140501"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk, where an out-of-bounds read was addressed with improved bounds checking. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: out-of-bounds write issue was addressed with improved bounds checking",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32888"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140501",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140501"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32888"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: out-of-bounds write issue was addressed with improved bounds checking"
    },
    {
      "cve": "CVE-2022-32923",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140502"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk. Processing maliciously crafted web content may disclose the internal states of the app.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: correctness issue in the JIT was addressed with improved checks",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140502",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140502"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32923"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: correctness issue in the JIT was addressed with improved checks"
    },
    {
      "cve": "CVE-2022-42799",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140503"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk, where an issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: issue was addressed with improved UI handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42799"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140503",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140503"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42799",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42799"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42799",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42799"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: issue was addressed with improved UI handling"
    },
    {
      "cve": "CVE-2022-42823",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140505"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk, where a logic issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: type confusion issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42823"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140505",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140505"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42823",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42823"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42823",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42823"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: type confusion issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-42824",
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140504"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk, where a type confusion issue was addressed with improved memory handling. By this security flaw processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: sensitive information disclosure issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42824"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140504",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140504"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42824",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42824"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42824",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42824"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: sensitive information disclosure issue"
    },
    {
      "cve": "CVE-2022-42826",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-02-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2167716"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This issue exists due to a use-after-free error when processing maliciously crafted web content in WebKit. This may allow an attacker to trick the victim to visit a specially crafted website, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use-after-free issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42826"
        },
        {
          "category": "external",
          "summary": "RHBZ#2167716",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167716"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42826",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42826"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42826",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42826"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0001.html"
        }
      ],
      "release_date": "2023-02-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: use-after-free issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-42852",
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156986"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory disclosure issue was addressed with improved memory handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156986",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156986"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42852"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory disclosure issue was addressed with improved memory handling"
    },
    {
      "cve": "CVE-2022-42863",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156987"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42863"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156987",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156987"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42863",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42863"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42863",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42863"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-42867",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156989"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use-after-free issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42867"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156989",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156989"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42867",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42867"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42867",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42867"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: use-after-free issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-46691",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156990"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46691"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156990",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156990"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46691",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46691"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46691",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46691"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-46692",
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156991"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Same Origin Policy bypass issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46692"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156991",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156991"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46692",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46692"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46692",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46692"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Same Origin Policy bypass issue"
    },
    {
      "cve": "CVE-2022-46698",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156992"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows an attacker to process maliciously crafted web content that may disclose sensitive user information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: logic issue leading to user information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46698"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156992",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156992"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46698",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46698"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46698",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46698"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: logic issue leading to user information disclosure"
    },
    {
      "cve": "CVE-2022-46699",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46699"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46699",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46699"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46699",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46699"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-46700",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156994"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46700"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156994",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156994"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46700"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-48503",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2023-06-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2218623"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: improper bounds checking leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality..\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-48503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2218623",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2218623"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-48503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-48503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48503"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2023-06-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2025-10-20T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: improper bounds checking leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-23517",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-02-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2167717"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. This may allow a remote attacker to create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-23517"
        },
        {
          "category": "external",
          "summary": "RHBZ#2167717",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167717"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-23517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-23517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-23517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23517"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0001.html"
        }
      ],
      "release_date": "2023-02-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-23518",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-02-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2167715"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-23518"
        },
        {
          "category": "external",
          "summary": "RHBZ#2167715",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167715"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-23518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-23518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-23518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23518"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0001.html"
        }
      ],
      "release_date": "2023-02-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-25358",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175099"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25358"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175099",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175099"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25358",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25358"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25358",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25358"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=242683",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=242683"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()"
    },
    {
      "cve": "CVE-2023-25360",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175101"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25360"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175101",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175101"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25360",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25360"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25360",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25360"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=242686",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=242686"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer()"
    },
    {
      "cve": "CVE-2023-25361",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175103"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25361"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175103",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175103"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25361",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25361"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25361",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25361"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=244249",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=244249"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()"
    },
    {
      "cve": "CVE-2023-25362",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175105"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25362"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175105",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175105"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25362",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25362"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25362",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25362"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=244802",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=244802"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()"
    },
    {
      "cve": "CVE-2023-25363",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175107"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
          "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
          "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25363"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175107",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175107"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25363",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25363"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25363",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25363"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=242684",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=242684"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-09T09:52:48+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2256"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
            "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
            "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags()"
    }
  ]
}

RHSA-2023:2834

Vulnerability from csaf_redhat - Published: 2023-05-16 08:54 - Updated: 2026-01-13 22:05

Summary

Red Hat Security Advisory: webkit2gtk3 security and bug fix update

Severity

Important

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518) * webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886) * webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888) * webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923) * webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799) * webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823) * webkitgtk: sensitive information disclosure issue (CVE-2022-42824) * webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863) * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691) * webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692) * webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699) * webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362) * webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

CVE-2022-32886

A vulnerability was found in webkitgtkm, where a buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-32888

A vulnerability was found in webkitgtk, where an out-of-bounds read was addressed with improved bounds checking. Processing maliciously crafted web content may lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-32923

A vulnerability was found in webkitgtk. Processing maliciously crafted web content may disclose the internal states of the app.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42799

A vulnerability was found in webkitgtk, where an issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42823

A vulnerability was found in webkitgtk, where a logic issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42824

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42826

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2022-42852

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42863

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-42867

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46691

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46692

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46698

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows an attacker to process maliciously crafted web content that may disclose sensitive user information.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46699

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-46700

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2022-48503

A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix Workaround

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

CVE-2023-23517

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2023-23518

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2023-25358

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-25360

A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-25361

A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-25362

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-25363

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

References

130 references

URL	Category
https://access.redhat.com/errata/RHSA-2023:2834	self
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/documentation/en-us/red…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2127468	external
https://bugzilla.redhat.com/show_bug.cgi?id=2128643	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140501	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140502	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140503	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140504	external
https://bugzilla.redhat.com/show_bug.cgi?id=2140505	external
https://bugzilla.redhat.com/show_bug.cgi?id=2150970	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156986	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156987	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156989	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156990	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156991	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156992	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156993	external
https://bugzilla.redhat.com/show_bug.cgi?id=2156994	external
https://bugzilla.redhat.com/show_bug.cgi?id=2167715	external
https://bugzilla.redhat.com/show_bug.cgi?id=2167716	external
https://bugzilla.redhat.com/show_bug.cgi?id=2167717	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175099	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175101	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175103	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175105	external
https://bugzilla.redhat.com/show_bug.cgi?id=2175107	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2022-32886	self
https://bugzilla.redhat.com/show_bug.cgi?id=2128643	external
https://www.cve.org/CVERecord?id=CVE-2022-32886	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32886	external
https://webkitgtk.org/security/WSA-2022-0009.html	external
https://access.redhat.com/security/cve/CVE-2022-32888	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140501	external
https://www.cve.org/CVERecord?id=CVE-2022-32888	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32888	external
https://webkitgtk.org/security/WSA-2022-0010.html	external
https://access.redhat.com/security/cve/CVE-2022-32923	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140502	external
https://www.cve.org/CVERecord?id=CVE-2022-32923	external
https://nvd.nist.gov/vuln/detail/CVE-2022-32923	external
https://access.redhat.com/security/cve/CVE-2022-42799	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140503	external
https://www.cve.org/CVERecord?id=CVE-2022-42799	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42799	external
https://access.redhat.com/security/cve/CVE-2022-42823	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140505	external
https://www.cve.org/CVERecord?id=CVE-2022-42823	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42823	external
https://access.redhat.com/security/cve/CVE-2022-42824	self
https://bugzilla.redhat.com/show_bug.cgi?id=2140504	external
https://www.cve.org/CVERecord?id=CVE-2022-42824	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42824	external
https://access.redhat.com/security/cve/CVE-2022-42826	self
https://bugzilla.redhat.com/show_bug.cgi?id=2167716	external
https://www.cve.org/CVERecord?id=CVE-2022-42826	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42826	external
https://webkitgtk.org/security/WSA-2023-0001.html	external
https://access.redhat.com/security/cve/CVE-2022-42852	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156986	external
https://www.cve.org/CVERecord?id=CVE-2022-42852	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42852	external
https://webkitgtk.org/security/WSA-2022-0011.html	external
https://access.redhat.com/security/cve/CVE-2022-42863	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156987	external
https://www.cve.org/CVERecord?id=CVE-2022-42863	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42863	external
https://access.redhat.com/security/cve/CVE-2022-42867	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156989	external
https://www.cve.org/CVERecord?id=CVE-2022-42867	external
https://nvd.nist.gov/vuln/detail/CVE-2022-42867	external
https://access.redhat.com/security/cve/CVE-2022-46691	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156990	external
https://www.cve.org/CVERecord?id=CVE-2022-46691	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46691	external
https://access.redhat.com/security/cve/CVE-2022-46692	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156991	external
https://www.cve.org/CVERecord?id=CVE-2022-46692	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46692	external
https://access.redhat.com/security/cve/CVE-2022-46698	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156992	external
https://www.cve.org/CVERecord?id=CVE-2022-46698	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46698	external
https://access.redhat.com/security/cve/CVE-2022-46699	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156993	external
https://www.cve.org/CVERecord?id=CVE-2022-46699	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46699	external
https://access.redhat.com/security/cve/CVE-2022-46700	self
https://bugzilla.redhat.com/show_bug.cgi?id=2156994	external
https://www.cve.org/CVERecord?id=CVE-2022-46700	external
https://nvd.nist.gov/vuln/detail/CVE-2022-46700	external
https://access.redhat.com/security/cve/CVE-2022-48503	self
https://bugzilla.redhat.com/show_bug.cgi?id=2218623	external
https://www.cve.org/CVERecord?id=CVE-2022-48503	external
https://nvd.nist.gov/vuln/detail/CVE-2022-48503	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2023-23517	self
https://bugzilla.redhat.com/show_bug.cgi?id=2167717	external
https://www.cve.org/CVERecord?id=CVE-2023-23517	external
https://nvd.nist.gov/vuln/detail/CVE-2023-23517	external
https://access.redhat.com/security/cve/CVE-2023-23518	self
https://bugzilla.redhat.com/show_bug.cgi?id=2167715	external
https://www.cve.org/CVERecord?id=CVE-2023-23518	external
https://nvd.nist.gov/vuln/detail/CVE-2023-23518	external
https://access.redhat.com/security/cve/CVE-2023-25358	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175099	external
https://www.cve.org/CVERecord?id=CVE-2023-25358	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25358	external
https://bugs.webkit.org/show_bug.cgi?id=242683	external
https://access.redhat.com/security/cve/CVE-2023-25360	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175101	external
https://www.cve.org/CVERecord?id=CVE-2023-25360	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25360	external
https://bugs.webkit.org/show_bug.cgi?id=242686	external
https://access.redhat.com/security/cve/CVE-2023-25361	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175103	external
https://www.cve.org/CVERecord?id=CVE-2023-25361	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25361	external
https://bugs.webkit.org/show_bug.cgi?id=244249	external
https://access.redhat.com/security/cve/CVE-2023-25362	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175105	external
https://www.cve.org/CVERecord?id=CVE-2023-25362	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25362	external
https://bugs.webkit.org/show_bug.cgi?id=244802	external
https://access.redhat.com/security/cve/CVE-2023-25363	self
https://bugzilla.redhat.com/show_bug.cgi?id=2175107	external
https://www.cve.org/CVERecord?id=CVE-2023-25363	external
https://nvd.nist.gov/vuln/detail/CVE-2023-25363	external
https://bugs.webkit.org/show_bug.cgi?id=242684	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)\n\n* webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)\n\n* webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)\n\n* webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)\n\n* webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)\n\n* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)\n\n* webkitgtk: sensitive information disclosure issue (CVE-2022-42824)\n\n* webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)\n\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)\n\n* webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)\n\n* webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2023:2834",
        "url": "https://access.redhat.com/errata/RHSA-2023:2834"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index",
        "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index"
      },
      {
        "category": "external",
        "summary": "2127468",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2127468"
      },
      {
        "category": "external",
        "summary": "2128643",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128643"
      },
      {
        "category": "external",
        "summary": "2140501",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140501"
      },
      {
        "category": "external",
        "summary": "2140502",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140502"
      },
      {
        "category": "external",
        "summary": "2140503",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140503"
      },
      {
        "category": "external",
        "summary": "2140504",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140504"
      },
      {
        "category": "external",
        "summary": "2140505",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140505"
      },
      {
        "category": "external",
        "summary": "2150970",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2150970"
      },
      {
        "category": "external",
        "summary": "2156986",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156986"
      },
      {
        "category": "external",
        "summary": "2156987",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156987"
      },
      {
        "category": "external",
        "summary": "2156989",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156989"
      },
      {
        "category": "external",
        "summary": "2156990",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156990"
      },
      {
        "category": "external",
        "summary": "2156991",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156991"
      },
      {
        "category": "external",
        "summary": "2156992",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156992"
      },
      {
        "category": "external",
        "summary": "2156993",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156993"
      },
      {
        "category": "external",
        "summary": "2156994",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156994"
      },
      {
        "category": "external",
        "summary": "2167715",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167715"
      },
      {
        "category": "external",
        "summary": "2167716",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167716"
      },
      {
        "category": "external",
        "summary": "2167717",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167717"
      },
      {
        "category": "external",
        "summary": "2175099",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175099"
      },
      {
        "category": "external",
        "summary": "2175101",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175101"
      },
      {
        "category": "external",
        "summary": "2175103",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175103"
      },
      {
        "category": "external",
        "summary": "2175105",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175105"
      },
      {
        "category": "external",
        "summary": "2175107",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175107"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2834.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security and bug fix update",
    "tracking": {
      "current_release_date": "2026-01-13T22:05:53+00:00",
      "generator": {
        "date": "2026-01-13T22:05:53+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.15"
        }
      },
      "id": "RHSA-2023:2834",
      "initial_release_date": "2023-05-16T08:54:42+00:00",
      "revision_history": [
        {
          "date": "2023-05-16T08:54:42+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2023-05-16T08:54:42+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-01-13T22:05:53+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.8.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el8.src",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el8.src",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el8?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el8?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el8?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el8?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el8?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el8?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el8?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el8.src",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64",
        "relates_to_product_reference": "AppStream-8.8.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-32886",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2022-09-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2128643"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtkm, where a buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: buffer overflow issue was addressed with improved memory handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32886"
        },
        {
          "category": "external",
          "summary": "RHBZ#2128643",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128643"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32886",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32886"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32886",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32886"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0009.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0009.html"
        }
      ],
      "release_date": "2022-09-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: buffer overflow issue was addressed with improved memory handling"
    },
    {
      "cve": "CVE-2022-32888",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140501"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk, where an out-of-bounds read was addressed with improved bounds checking. Processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: out-of-bounds write issue was addressed with improved bounds checking",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32888"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140501",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140501"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32888"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: out-of-bounds write issue was addressed with improved bounds checking"
    },
    {
      "cve": "CVE-2022-32923",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140502"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk. Processing maliciously crafted web content may disclose the internal states of the app.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: correctness issue in the JIT was addressed with improved checks",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-32923"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140502",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140502"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-32923",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-32923"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32923",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32923"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: correctness issue in the JIT was addressed with improved checks"
    },
    {
      "cve": "CVE-2022-42799",
      "cwe": {
        "id": "CWE-1021",
        "name": "Improper Restriction of Rendered UI Layers or Frames"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140503"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk, where an issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: issue was addressed with improved UI handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42799"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140503",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140503"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42799",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42799"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42799",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42799"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: issue was addressed with improved UI handling"
    },
    {
      "cve": "CVE-2022-42823",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140505"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk, where a logic issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: type confusion issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42823"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140505",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140505"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42823",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42823"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42823",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42823"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: type confusion issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-42824",
      "discovery_date": "2022-11-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2140504"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk, where a type confusion issue was addressed with improved memory handling. By this security flaw processing maliciously crafted web content may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: sensitive information disclosure issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42824"
        },
        {
          "category": "external",
          "summary": "RHBZ#2140504",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140504"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42824",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42824"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42824",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42824"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0010.html"
        }
      ],
      "release_date": "2022-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: sensitive information disclosure issue"
    },
    {
      "cve": "CVE-2022-42826",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-02-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2167716"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This issue exists due to a use-after-free error when processing maliciously crafted web content in WebKit. This may allow an attacker to trick the victim to visit a specially crafted website, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use-after-free issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42826"
        },
        {
          "category": "external",
          "summary": "RHBZ#2167716",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167716"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42826",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42826"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42826",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42826"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0001.html"
        }
      ],
      "release_date": "2023-02-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: use-after-free issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-42852",
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156986"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory disclosure issue was addressed with improved memory handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156986",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156986"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42852"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory disclosure issue was addressed with improved memory handling"
    },
    {
      "cve": "CVE-2022-42863",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156987"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42863"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156987",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156987"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42863",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42863"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42863",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42863"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-42867",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156989"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use-after-free issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-42867"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156989",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156989"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-42867",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-42867"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42867",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42867"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: use-after-free issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-46691",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156990"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46691"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156990",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156990"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46691",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46691"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46691",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46691"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-46692",
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156991"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Same Origin Policy bypass issue",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46692"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156991",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156991"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46692",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46692"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46692",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46692"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Same Origin Policy bypass issue"
    },
    {
      "cve": "CVE-2022-46698",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156992"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows an attacker to process maliciously crafted web content that may disclose sensitive user information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: logic issue leading to user information disclosure",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46698"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156992",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156992"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46698",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46698"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46698",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46698"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: logic issue leading to user information disclosure"
    },
    {
      "cve": "CVE-2022-46699",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156993"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46699"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156993",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156993"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46699",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46699"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46699",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46699"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-46700",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2022-12-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2156994"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-46700"
        },
        {
          "category": "external",
          "summary": "RHBZ#2156994",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156994"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-46700",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-46700"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46700",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46700"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2022-0011.html"
        }
      ],
      "release_date": "2022-12-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2022-48503",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2023-06-29T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2218623"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: improper bounds checking leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality..\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2022-48503"
        },
        {
          "category": "external",
          "summary": "RHBZ#2218623",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2218623"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2022-48503",
          "url": "https://www.cve.org/CVERecord?id=CVE-2022-48503"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48503",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48503"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2023-06-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2025-10-20T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: improper bounds checking leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-23517",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-02-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2167717"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. This may allow a remote attacker to create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-23517"
        },
        {
          "category": "external",
          "summary": "RHBZ#2167717",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167717"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-23517",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-23517"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-23517",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23517"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0001.html"
        }
      ],
      "release_date": "2023-02-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-23518",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2023-02-07T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2167715"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-23518"
        },
        {
          "category": "external",
          "summary": "RHBZ#2167715",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167715"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-23518",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-23518"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-23518",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23518"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0001.html"
        }
      ],
      "release_date": "2023-02-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-25358",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175099"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25358"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175099",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175099"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25358",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25358"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25358",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25358"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=242683",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=242683"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()"
    },
    {
      "cve": "CVE-2023-25360",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175101"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25360"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175101",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175101"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25360",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25360"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25360",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25360"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=242686",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=242686"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer()"
    },
    {
      "cve": "CVE-2023-25361",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175103"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25361"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175103",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175103"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25361",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25361"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25361",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25361"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=244249",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=244249"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()"
    },
    {
      "cve": "CVE-2023-25362",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175105"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25362"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175105",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175105"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25362",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25362"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25362",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25362"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=244802",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=244802"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()"
    },
    {
      "cve": "CVE-2023-25363",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-03-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2175107"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
          "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
          "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-25363"
        },
        {
          "category": "external",
          "summary": "RHBZ#2175107",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175107"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25363",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-25363"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25363",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25363"
        },
        {
          "category": "external",
          "summary": "https://bugs.webkit.org/show_bug.cgi?id=242684",
          "url": "https://bugs.webkit.org/show_bug.cgi?id=242684"
        }
      ],
      "release_date": "2022-07-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2023-05-16T08:54:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2023:2834"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.src",
            "AppStream-8.8.0.GA:webkit2gtk3-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el8.x86_64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.aarch64",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.i686",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.ppc64le",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.s390x",
            "AppStream-8.8.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags()"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2022-42824 (GCVE-0-2022-42824)

Solution

Solution

Vulnerability from osv_almalinux

Vulnerability from osv_almalinux

Tags

Sightings

Nomenclature