Vulnerability-Lookup

CVE-2024-23271 (GCVE-0-2024-23271)

Vulnerability from cvelistv5 – Published: 2024-04-24 16:43 – Updated: 2026-04-02 18:15

Summary

A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

Severity ?

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE

A malicious website may cause unexpected cross-origin behavior

Assigner

apple

References

5 references

URL	Tags
https://support.apple.com/en-us/120304
https://support.apple.com/en-us/120306
https://support.apple.com/en-us/120309
https://support.apple.com/en-us/120311
https://support.apple.com/en-us/120339

Impacted products

5 products

Vendor	Product	Version
Apple	Safari	Affected: 0 , < 17.3 (custom)
Apple	iOS and iPadOS	Affected: 0 , < 17.3 (custom)
Apple	macOS	Affected: 0 , < 14.3 (custom)
Apple	tvOS	Affected: 0 , < 17.3 (custom)
Apple	watchOS	Affected: 0 , < 10.3 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:apple:ios:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ios",
            "vendor": "apple",
            "versions": [
              {
                "status": "affected",
                "version": "*"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-23271",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-01T17:21:25.656286Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:45:53.010Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:59:32.112Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214059"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214055"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214056"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214060"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT214061"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT214060"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT214059"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT214061"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT214055"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT214056"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "14.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "17.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "10.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "A malicious website may cause unexpected cross-origin behavior",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-02T18:15:53.232Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/120304"
        },
        {
          "url": "https://support.apple.com/en-us/120306"
        },
        {
          "url": "https://support.apple.com/en-us/120309"
        },
        {
          "url": "https://support.apple.com/en-us/120311"
        },
        {
          "url": "https://support.apple.com/en-us/120339"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-23271",
    "datePublished": "2024-04-24T16:43:43.625Z",
    "dateReserved": "2024-01-12T22:22:21.498Z",
    "dateUpdated": "2026-04-02T18:15:53.232Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-23271",
      "date": "2026-05-20",
      "epss": "0.00095",
      "percentile": "0.26159"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"17.3\", \"matchCriteriaId\": \"3D6F41D4-58ED-4E0B-90B4-3EDDB7CEA240\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"17.3\", \"matchCriteriaId\": \"93A0FBA9-3FF2-483E-8669-E2C196B3A444\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"17.3\", \"matchCriteriaId\": \"F927B013-925E-4474-B464-3FA0241F9269\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"14.0\", \"versionEndExcluding\": \"14.3\", \"matchCriteriaId\": \"79ADFEBE-99EE-4F01-9AE8-489EB41885D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"17.3\", \"matchCriteriaId\": \"921307BF-8419-42C7-9B2C-8DD643723E38\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"10.3\", \"matchCriteriaId\": \"F265723B-24BD-4BD9-A45C-6FFD000A7B03\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.\"}, {\"lang\": \"es\", \"value\": \"Se solucion\\u00f3 un problema de l\\u00f3gica con controles mejorados. Este problema se solucion\\u00f3 en iOS 17.3 y iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. Un sitio web malicioso puede provocar un comportamiento inesperado entre or\\u00edgenes.\"}]",
      "id": "CVE-2024-23271",
      "lastModified": "2024-12-12T14:33:00.640",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"baseScore\": 7.3, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"LOW\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.4}]}",
      "published": "2024-04-24T17:15:47.127",
      "references": "[{\"url\": \"https://support.apple.com/en-us/HT214055\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214056\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214059\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214060\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214061\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214055\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214056\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214059\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214060\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214061\", \"source\": \"product-security@apple.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214055\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214056\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214059\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214060\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/en-us/HT214061\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214055\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214056\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214059\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214060\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.apple.com/kb/HT214061\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "product-security@apple.com",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}, {\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-284\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-23271\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2024-04-24T17:15:47.127\",\"lastModified\":\"2026-04-02T19:17:10.843\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.\"},{\"lang\":\"es\",\"value\":\"Se solucion\u00f3 un problema de l\u00f3gica con controles mejorados. Este problema se solucion\u00f3 en iOS 17.3 y iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. Un sitio web malicioso puede provocar un comportamiento inesperado entre or\u00edgenes.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":3.4}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-284\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"17.3\",\"matchCriteriaId\":\"3D6F41D4-58ED-4E0B-90B4-3EDDB7CEA240\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"17.3\",\"matchCriteriaId\":\"93A0FBA9-3FF2-483E-8669-E2C196B3A444\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"17.3\",\"matchCriteriaId\":\"F927B013-925E-4474-B464-3FA0241F9269\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"14.0\",\"versionEndExcluding\":\"14.3\",\"matchCriteriaId\":\"79ADFEBE-99EE-4F01-9AE8-489EB41885D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"17.3\",\"matchCriteriaId\":\"921307BF-8419-42C7-9B2C-8DD643723E38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"10.3\",\"matchCriteriaId\":\"F265723B-24BD-4BD9-A45C-6FFD000A7B03\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/120304\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120306\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120309\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120311\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/120339\",\"source\":\"product-security@apple.com\"},{\"url\":\"https://support.apple.com/en-us/HT214055\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214056\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214059\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214060\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/HT214061\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214055\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214056\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214059\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214060\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/kb/HT214061\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://support.apple.com/en-us/HT214059\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214055\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214056\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214060\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/en-us/HT214061\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214060\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214059\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214061\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214055\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://support.apple.com/kb/HT214056\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-01T22:59:32.112Z\"}}, {\"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-23271\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-01T17:21:25.656286Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:o:apple:ios:*:*:*:*:*:*:*:*\"], \"vendor\": \"apple\", \"product\": \"ios\", \"versions\": [{\"status\": \"affected\", \"version\": \"*\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-284\", \"description\": \"CWE-284 Improper Access Control\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-01T18:04:20.707Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"Safari\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"17.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"17.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"14.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"17.3\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"watchOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"10.3\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/120304\"}, {\"url\": \"https://support.apple.com/en-us/120306\"}, {\"url\": \"https://support.apple.com/en-us/120309\"}, {\"url\": \"https://support.apple.com/en-us/120311\"}, {\"url\": \"https://support.apple.com/en-us/120339\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"A malicious website may cause unexpected cross-origin behavior\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2026-04-02T18:15:53.232Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-23271\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-04-02T18:15:53.232Z\", \"dateReserved\": \"2024-01-12T22:22:21.498Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2024-04-24T16:43:43.625Z\", \"assignerShortName\": \"apple\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

CERTFR-2025-AVI-0304

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

L'éditeur indique que les versions 21.4.x de Junos OS pour SRX Series ne bénéficient pas de correctif pour la vulnérabilité CVE-2025-30659.

Impacted products

Vendor	Product	Description
Juniper Networks	Junos OS	Junos OS versions 21.4.x antérieures à 21.4R3-S10
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 22.4.x-EVO antérieures à 22.4R3-S6-EVO
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 23.4.x-EVO antérieures à 23.4R2-S4-EVO
Juniper Networks	Junos OS	Junos OS versions 22.2.x antérieures à 22.2R3-S6
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions antérieures à 21.4R3-S10-EVO
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 23.2.x-EVO antérieures à 23.2R2-S3-EVO
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 24.2.x-EVO antérieures à 24.2R2-EVO
Juniper Networks	Junos Space	Junos Space versions antérieures à 24.1R3
Juniper Networks	Junos Space	Junos Space Security Director versions antérieures à 24.1R3
Juniper Networks	Junos OS	Junos OS versions 23.4.x antérieures à 23.4R2-S4
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 22.2.x-EVO antérieures à 22.2R3-S6-EVO
Juniper Networks	CTPView	CTPView versions antérieures à 9.2R1
Juniper Networks	Junos OS	Junos OS versions 22.4.x antérieures à 22.4R3-S6
Juniper Networks	Junos OS	Junos OS versions 23.2.x antérieures à 23.2R2-S3
Juniper Networks	Junos OS	Junos OS versions 24.2.x antérieures à 24.2R2
Juniper Networks	Junos OS	Junos OS versions antérieures à 21.2R3-S9

References

Title

Publication Time

CERTFR-2025-AVI-0304

Vulnerability from certfr_avis - Published: - Updated:

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

L'éditeur indique que les versions 21.4.x de Junos OS pour SRX Series ne bénéficient pas de correctif pour la vulnérabilité CVE-2025-30659.

Impacted products

Vendor	Product	Description
Juniper Networks	Junos OS	Junos OS versions 21.4.x antérieures à 21.4R3-S10
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 22.4.x-EVO antérieures à 22.4R3-S6-EVO
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 23.4.x-EVO antérieures à 23.4R2-S4-EVO
Juniper Networks	Junos OS	Junos OS versions 22.2.x antérieures à 22.2R3-S6
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions antérieures à 21.4R3-S10-EVO
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 23.2.x-EVO antérieures à 23.2R2-S3-EVO
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 24.2.x-EVO antérieures à 24.2R2-EVO
Juniper Networks	Junos Space	Junos Space versions antérieures à 24.1R3
Juniper Networks	Junos Space	Junos Space Security Director versions antérieures à 24.1R3
Juniper Networks	Junos OS	Junos OS versions 23.4.x antérieures à 23.4R2-S4
Juniper Networks	Junos OS Evolved	Junos OS Evolved versions 22.2.x-EVO antérieures à 22.2R3-S6-EVO
Juniper Networks	CTPView	CTPView versions antérieures à 9.2R1
Juniper Networks	Junos OS	Junos OS versions 22.4.x antérieures à 22.4R3-S6
Juniper Networks	Junos OS	Junos OS versions 23.2.x antérieures à 23.2R2-S3
Juniper Networks	Junos OS	Junos OS versions 24.2.x antérieures à 24.2R2
Juniper Networks	Junos OS	Junos OS versions antérieures à 21.2R3-S9

References

Title

Publication Time

alsa-2024:8180

Vulnerability from osv_almalinux

Published

2024-10-16 00:00

Modified

2024-10-18 09:22

Summary

Important: webkit2gtk3 security update

Details

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776)
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)
webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)
webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)
webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)
webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)
webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271)
webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)
webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)
webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)
webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2024:8180	ADVISORY
	https://access.redhat.com/security/cve/CVE-2024-23271	REPORT
	https://access.redhat.com/security/cve/CVE-2024-27820	REPORT
	https://access.redhat.com/security/cve/CVE-2024-27838	REPORT
	https://access.redhat.com/security/cve/CVE-2024-27851	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40776	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40779	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40780	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40782	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40789	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40866	REPORT
	https://access.redhat.com/security/cve/CVE-2024-44187	REPORT
	https://bugzilla.redhat.com/2301841	REPORT
	https://bugzilla.redhat.com/2302067	REPORT
	https://bugzilla.redhat.com/2302069	REPORT
	https://bugzilla.redhat.com/2302070	REPORT
	https://bugzilla.redhat.com/2302071	REPORT
	https://bugzilla.redhat.com/2312724	REPORT
	https://bugzilla.redhat.com/2314696	REPORT
	https://bugzilla.redhat.com/2314698	REPORT
	https://bugzilla.redhat.com/2314702	REPORT
	https://bugzilla.redhat.com/2314704	REPORT
	https://bugzilla.redhat.com/2314706	REPORT
	https://errata.almalinux.org/9/ALSA-2024-8180.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.46.1-2.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.46.1-2.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-jsc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.46.1-2.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "webkit2gtk3-jsc-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.46.1-2.el9_4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776)\n* webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)\n* webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)\n* webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)\n* webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271)\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)\n* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)\n* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "id": "ALSA-2024:8180",
  "modified": "2024-10-18T09:22:49Z",
  "published": "2024-10-16T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2024:8180"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-23271"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-27820"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-27838"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-27851"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40776"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40779"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40780"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40782"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40789"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40866"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-44187"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2301841"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2302067"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2302069"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2302070"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2302071"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2312724"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314696"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314698"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314702"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314704"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314706"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2024-8180.html"
    }
  ],
  "related": [
    "CVE-2024-40776",
    "CVE-2024-40789",
    "CVE-2024-40780",
    "CVE-2024-40779",
    "CVE-2024-40782",
    "CVE-2024-40866",
    "CVE-2024-23271",
    "CVE-2024-27820",
    "CVE-2024-27838",
    "CVE-2024-27851",
    "CVE-2024-44187"
  ],
  "summary": "Important: webkit2gtk3 security update"
}

alsa-2024:9636

Vulnerability from osv_almalinux

Published

2024-11-14 00:00

Modified

2024-11-15 12:47

Summary

Important: webkit2gtk3 security update

Details

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

chromium-browser: Use after free in ANGLE (CVE-2024-4558)
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)
webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)
webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)
webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)
webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)
webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271)
webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)
webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)
webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)
webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185)
webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44244)
webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2024-44296)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2024:9636	ADVISORY
	https://access.redhat.com/security/cve/CVE-2024-23271	REPORT
	https://access.redhat.com/security/cve/CVE-2024-27820	REPORT
	https://access.redhat.com/security/cve/CVE-2024-27838	REPORT
	https://access.redhat.com/security/cve/CVE-2024-27851	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40779	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40780	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40782	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40789	REPORT
	https://access.redhat.com/security/cve/CVE-2024-40866	REPORT
	https://access.redhat.com/security/cve/CVE-2024-44185	REPORT
	https://access.redhat.com/security/cve/CVE-2024-44187	REPORT
	https://access.redhat.com/security/cve/CVE-2024-44244	REPORT
	https://access.redhat.com/security/cve/CVE-2024-44296	REPORT
	https://access.redhat.com/security/cve/CVE-2024-4558	REPORT
	https://bugzilla.redhat.com/2279689	REPORT
	https://bugzilla.redhat.com/2302067	REPORT
	https://bugzilla.redhat.com/2302069	REPORT
	https://bugzilla.redhat.com/2302070	REPORT
	https://bugzilla.redhat.com/2302071	REPORT
	https://bugzilla.redhat.com/2312724	REPORT
	https://bugzilla.redhat.com/2314696	REPORT
	https://bugzilla.redhat.com/2314698	REPORT
	https://bugzilla.redhat.com/2314702	REPORT
	https://bugzilla.redhat.com/2314704	REPORT
	https://bugzilla.redhat.com/2314706	REPORT
	https://bugzilla.redhat.com/2323263	REPORT
	https://bugzilla.redhat.com/2323278	REPORT
	https://bugzilla.redhat.com/2323289	REPORT
	https://errata.almalinux.org/8/ALSA-2024-9636.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "webkit2gtk3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.46.3-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "webkit2gtk3-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.46.3-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "webkit2gtk3-jsc"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.46.3-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:8",
        "name": "webkit2gtk3-jsc-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.46.3-1.el8_10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * chromium-browser: Use after free in ANGLE (CVE-2024-4558)\n  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)\n  * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)\n  * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)\n  * webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)\n  * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)\n  * webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271)\n  * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)\n  * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)\n  * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)\n  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)\n  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185)\n  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44244)\n  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2024-44296)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2024:9636",
  "modified": "2024-11-15T12:47:22Z",
  "published": "2024-11-14T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2024:9636"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-23271"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-27820"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-27838"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-27851"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40779"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40780"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40782"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40789"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-40866"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-44185"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-44187"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-44244"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-44296"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2024-4558"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2279689"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2302067"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2302069"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2302070"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2302071"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2312724"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314696"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314698"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314702"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314704"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2314706"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2323263"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2323278"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2323289"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/8/ALSA-2024-9636.html"
    }
  ],
  "related": [
    "CVE-2024-4558",
    "CVE-2024-40789",
    "CVE-2024-40780",
    "CVE-2024-40779",
    "CVE-2024-40782",
    "CVE-2024-40866",
    "CVE-2024-23271",
    "CVE-2024-27820",
    "CVE-2024-27838",
    "CVE-2024-27851",
    "CVE-2024-44187",
    "CVE-2024-44185",
    "CVE-2024-44244",
    "CVE-2024-44296"
  ],
  "summary": "Important: webkit2gtk3 security update"
}

BDU:2024-09452

Vulnerability from fstec - Published: 24.04.2024

Title

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit, связанная с недостатками контроля доступа, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Description

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

Severity ?


                    
                      AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Vendor

Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра»

Software Name

Debian GNU/Linux, Astra Linux Special Edition (запись в едином реестре российских программ №369), WPE WebKit, WebKitGTK

Software Version

10 (Debian GNU/Linux), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 4.7 (Astra Linux Special Edition), до 2.42.5 (WPE WebKit), до 2.42.5 (WebKitGTK)

Possible Mitigations

Для WebKitGTK: использование рекомендаций производителя: https://webkitgtk.org/security/WSA-2024-0005.html Для Debian: использование рекомендаций производителя: https://security-tracker.debian.org/tracker/CVE-2024-23271 Для WPE WebKit: использование рекомендаций производителя: https://wpewebkit.org/security/WSA-2024-0005.html Для ОС Astra Linux: обновить пакет webkit2gtk до 2.44.2-1~deb11u1+ci202406131437+astra4 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-23271 https://security-tracker.debian.org/tracker/CVE-2024-23271 https://webkitgtk.org/security/WSA-2024-0005.html https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 https://wpewebkit.org/security/WSA-2024-0005.html

CWE

CWE-284

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "10 (Debian GNU/Linux), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), 4.7 (Astra Linux Special Edition), \u0434\u043e 2.42.5 (WPE WebKit), \u0434\u043e 2.42.5 (WebKitGTK)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0414\u043b\u044f WebKitGTK:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://webkitgtk.org/security/WSA-2024-0005.html\n\u0414\u043b\u044f Debian:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://security-tracker.debian.org/tracker/CVE-2024-23271\n\u0414\u043b\u044f WPE WebKit:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wpewebkit.org/security/WSA-2024-0005.html\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 webkit2gtk \u0434\u043e 2.44.2-1~deb11u1+ci202406131437+astra4 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "14.11.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "14.11.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-09452",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-23271",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), WPE WebKit, WebKitGTK",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 12 , \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 4.7  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 WebKitGTK \u0438 WPE WebKit, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (CWE-284)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446 WebKitGTK \u0438 WPE WebKit \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://nvd.nist.gov/vuln/detail/CVE-2024-23271\nhttps://security-tracker.debian.org/tracker/CVE-2024-23271\nhttps://webkitgtk.org/security/WSA-2024-0005.html\nhttps://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47\nhttps://wpewebkit.org/security/WSA-2024-0005.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-284",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,3)"
}

FKIE_CVE-2024-23271

Vulnerability from fkie_nvd - Published: 2024-04-24 17:15 - Updated: 2026-04-02 19:17

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
7.3 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Summary

References

URL	Tags
product-security@apple.com	https://support.apple.com/en-us/120304
product-security@apple.com	https://support.apple.com/en-us/120306
product-security@apple.com	https://support.apple.com/en-us/120309
product-security@apple.com	https://support.apple.com/en-us/120311
product-security@apple.com	https://support.apple.com/en-us/120339
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214055	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214056	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214059	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214060	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/en-us/HT214061	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214055	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214056	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214059	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214060	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://support.apple.com/kb/HT214061	Vendor Advisory

Impacted products

Vendor	Product	Version
apple	safari	*
apple	ipados	*
apple	iphone_os	*
apple	macos	*
apple	tvos	*
apple	watchos	*

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D6F41D4-58ED-4E0B-90B4-3EDDB7CEA240",
              "versionEndExcluding": "17.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "93A0FBA9-3FF2-483E-8669-E2C196B3A444",
              "versionEndExcluding": "17.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F927B013-925E-4474-B464-3FA0241F9269",
              "versionEndExcluding": "17.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "79ADFEBE-99EE-4F01-9AE8-489EB41885D1",
              "versionEndExcluding": "14.3",
              "versionStartIncluding": "14.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "921307BF-8419-42C7-9B2C-8DD643723E38",
              "versionEndExcluding": "17.3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F265723B-24BD-4BD9-A45C-6FFD000A7B03",
              "versionEndExcluding": "10.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A logic issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, tvOS 17.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior."
    },
    {
      "lang": "es",
      "value": "Se solucion\u00f3 un problema de l\u00f3gica con controles mejorados. Este problema se solucion\u00f3 en iOS 17.3 y iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. Un sitio web malicioso puede provocar un comportamiento inesperado entre or\u00edgenes."
    }
  ],
  "id": "CVE-2024-23271",
  "lastModified": "2026-04-02T19:17:10.843",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 7.3,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.4,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-04-24T17:15:47.127",
  "references": [
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120304"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120306"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120309"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120311"
    },
    {
      "source": "product-security@apple.com",
      "url": "https://support.apple.com/en-us/120339"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214055"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214056"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214059"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214060"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/en-us/HT214061"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/kb/HT214055"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/kb/HT214056"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/kb/HT214059"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/kb/HT214060"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.apple.com/kb/HT214061"
    }
  ],
  "sourceIdentifier": "product-security@apple.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-C7HR-M654-77G5

Vulnerability from github – Published: 2024-04-24 18:30 – Updated: 2026-04-02 21:31

Details

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.

Severity ?

7.3 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-23271"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-284"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-04-24T17:15:47Z",
    "severity": "HIGH"
  },
  "details": "A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.",
  "id": "GHSA-c7hr-m654-77g5",
  "modified": "2026-04-02T21:31:39Z",
  "published": "2024-04-24T18:30:33Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23271"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120304"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120306"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120309"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120311"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/120339"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214055"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214056"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214059"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214060"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT214061"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214055"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214056"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214059"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214060"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT214061"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-23271

Vulnerability from gsd - Updated: 2024-01-13 06:02

Details

Aliases

CVE-2024-23271

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-23271"
      ],
      "details": "A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior.",
      "id": "GSD-2024-23271",
      "modified": "2024-01-13T06:02:12.063090Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "product-security@apple.com",
        "ID": "CVE-2024-23271",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "iOS and iPadOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "unspecified",
                          "version_value": "17.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "tvOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "unspecified",
                          "version_value": "17.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Safari",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "unspecified",
                          "version_value": "17.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "watchOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "unspecified",
                          "version_value": "10.3"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "macOS",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_name": "unspecified",
                          "version_value": "14.3"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Apple"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "A malicious website may cause unexpected cross-origin behavior"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://support.apple.com/en-us/HT214059",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT214059"
          },
          {
            "name": "https://support.apple.com/en-us/HT214055",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT214055"
          },
          {
            "name": "https://support.apple.com/en-us/HT214056",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT214056"
          },
          {
            "name": "https://support.apple.com/en-us/HT214060",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT214060"
          },
          {
            "name": "https://support.apple.com/en-us/HT214061",
            "refsource": "MISC",
            "url": "https://support.apple.com/en-us/HT214061"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "A logic issue was addressed with improved checks. This issue is fixed in iOS 17.3 and iPadOS 17.3, Safari 17.3, tvOS 17.3, macOS Sonoma 14.3, watchOS 10.3. A malicious website may cause unexpected cross-origin behavior."
          }
        ],
        "id": "CVE-2024-23271",
        "lastModified": "2024-04-24T17:16:50.397",
        "metrics": {},
        "published": "2024-04-24T17:15:47.127",
        "references": [
          {
            "source": "product-security@apple.com",
            "url": "https://support.apple.com/en-us/HT214055"
          },
          {
            "source": "product-security@apple.com",
            "url": "https://support.apple.com/en-us/HT214056"
          },
          {
            "source": "product-security@apple.com",
            "url": "https://support.apple.com/en-us/HT214059"
          },
          {
            "source": "product-security@apple.com",
            "url": "https://support.apple.com/en-us/HT214060"
          },
          {
            "source": "product-security@apple.com",
            "url": "https://support.apple.com/en-us/HT214061"
          }
        ],
        "sourceIdentifier": "product-security@apple.com",
        "vulnStatus": "Awaiting Analysis"
      }
    }
  }
}

RHSA-2024:2126

Vulnerability from csaf_redhat - Published: 2024-04-30 10:37 - Updated: 2026-03-18 02:25

Summary

Red Hat Security Advisory: webkit2gtk3 security update

Severity

Important

Notes

Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928) * webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917) * webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883) * webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414) * webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745) * webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359) * webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852) * webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2014-1745

A use-after-free vulnerability was found in the SVG implementation within WebKitGTK. This flaw allows remote attackers to exploit the removal of an SVGFontFaceElement object, which occurs through specific vectors that trigger the deletion of the object during rendering.

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2023-32359

A flaw was found in webkitgtk where a user’s password may be read aloud by a text-to-speech accessibility feature.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-39928

A use-after-free vulnerability was found in the WebKitGTK's MediaRecorder API that may lead to memory corruption and Remote Code Execution. The victim needs to access a malicious web page to trigger this vulnerability.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-40414

A vulnerability in WebKitGTK and WPE WebKit could allow an attacker to execute arbitrary code on a target system. The issue arises from a use-after-free flaw in memory management when processing web content. This flaw can potentially give attackers the ability to take control of affected systems.

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2023-41983

A vulnerability in WebKitGTK and WPE WebKit may result in a denial-of-service when processing web content. This issue arises from improper memory handling, which could be exploited by attackers to crash the affected systems.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2023-42852

A vulnerability was found in WebKitGTK and WPE WebKit, which allows remote attacker to perform arbitrary code execution when processing web content. This vulnerability caused by insufficient checks, which could be exploited by attackers to execute malicious code on affected systems.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2023-42875

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2023-42883

A flaw was found in WebKitGTK. This issue exists due to a boundary error when processing a malicious image, which could result in a denial of service.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2023-42890

A flaw was found in WebKitGTK. This issue exists due to a boundary error when processing malicious HTML content in WebKit, which could result in memory corruption and arbitrary code execution on the target system.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2023-42917

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

CVE-2023-42970

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in arbitrary code execution.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2023-43000

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in memory corruption.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Important

CVE-2024-23271

A flaw was found in WebKit. This flaw allows a remote attacker to trigger unexpected cross-origin behavior via a malicious website.

4.6 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

CWE-942 - Permissive Cross-domain Security Policy with Untrusted Domains

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

75 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:2126	self
https://docs.redhat.com/en/documentation/red_hat_…	external
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2241400	external
https://bugzilla.redhat.com/show_bug.cgi?id=2253058	external
https://bugzilla.redhat.com/show_bug.cgi?id=2254326	external
https://bugzilla.redhat.com/show_bug.cgi?id=2254327	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270143	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270151	external
https://bugzilla.redhat.com/show_bug.cgi?id=2271449	external
https://bugzilla.redhat.com/show_bug.cgi?id=2271453	external
https://bugzilla.redhat.com/show_bug.cgi?id=2271456	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314696	external
https://issues.redhat.com/browse/RHEL-3960	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2014-1745	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270151	external
https://www.cve.org/CVERecord?id=CVE-2014-1745	external
https://nvd.nist.gov/vuln/detail/CVE-2014-1745	external
https://webkitgtk.org/security/WSA-2024-0001.html	external
https://access.redhat.com/security/cve/CVE-2023-32359	self
https://bugzilla.redhat.com/show_bug.cgi?id=2271449	external
https://www.cve.org/CVERecord?id=CVE-2023-32359	external
https://nvd.nist.gov/vuln/detail/CVE-2023-32359	external
https://webkitgtk.org/security/WSA-2023-0010.html	external
https://access.redhat.com/security/cve/CVE-2023-39928	self
https://bugzilla.redhat.com/show_bug.cgi?id=2241400	external
https://www.cve.org/CVERecord?id=CVE-2023-39928	external
https://nvd.nist.gov/vuln/detail/CVE-2023-39928	external
https://webkitgtk.org/security/WSA-2023-0009.html	external
https://access.redhat.com/security/cve/CVE-2023-40414	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270143	external
https://www.cve.org/CVERecord?id=CVE-2023-40414	external
https://nvd.nist.gov/vuln/detail/CVE-2023-40414	external
https://access.redhat.com/security/cve/CVE-2023-41983	self
https://bugzilla.redhat.com/show_bug.cgi?id=2271453	external
https://www.cve.org/CVERecord?id=CVE-2023-41983	external
https://nvd.nist.gov/vuln/detail/CVE-2023-41983	external
https://access.redhat.com/security/cve/CVE-2023-42852	self
https://bugzilla.redhat.com/show_bug.cgi?id=2271456	external
https://www.cve.org/CVERecord?id=CVE-2023-42852	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42852	external
https://access.redhat.com/security/cve/CVE-2023-42875	self
https://bugzilla.redhat.com/show_bug.cgi?id=2366497	external
https://www.cve.org/CVERecord?id=CVE-2023-42875	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42875	external
https://webkitgtk.org/security/WSA-2025-0004.html	external
https://access.redhat.com/security/cve/CVE-2023-42883	self
https://bugzilla.redhat.com/show_bug.cgi?id=2254326	external
https://www.cve.org/CVERecord?id=CVE-2023-42883	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42883	external
https://access.redhat.com/security/cve/CVE-2023-42890	self
https://bugzilla.redhat.com/show_bug.cgi?id=2254327	external
https://www.cve.org/CVERecord?id=CVE-2023-42890	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42890	external
https://access.redhat.com/security/cve/CVE-2023-42917	self
https://bugzilla.redhat.com/show_bug.cgi?id=2253058	external
https://www.cve.org/CVERecord?id=CVE-2023-42917	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42917	external
https://webkitgtk.org/security/WSA-2023-0011.html	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2023-42970	self
https://bugzilla.redhat.com/show_bug.cgi?id=2366498	external
https://www.cve.org/CVERecord?id=CVE-2023-42970	external
https://nvd.nist.gov/vuln/detail/CVE-2023-42970	external
https://access.redhat.com/security/cve/CVE-2023-43000	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416324	external
https://www.cve.org/CVERecord?id=CVE-2023-43000	external
https://nvd.nist.gov/vuln/detail/CVE-2023-43000	external
https://webkitgtk.org/security/WSA-2025-0008.html	external
https://access.redhat.com/security/cve/CVE-2024-23271	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314696	external
https://www.cve.org/CVERecord?id=CVE-2024-23271	external
https://nvd.nist.gov/vuln/detail/CVE-2024-23271	external
https://webkitgtk.org/security/WSA-2024-0005.html	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports (CVE-2023-39928)\n\n* webkitgtk: Arbitrary Remote Code Execution (CVE-2023-42917)\n\n* webkitgtk: processing a malicious image may lead to a denial of service (CVE-2023-42883)\n\n* webkitgtk: processing malicious web content may lead to arbitrary code execution (CVE-2023-42890)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)\n\n* webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents (CVE-2014-1745)\n\n* webkitgtk: User password may be read aloud by a text-to-speech accessibility feature (CVE-2023-32359)\n\n* webkitgtk: Processing web content may lead to a denial of service (CVE-2023-41983)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-42852)\n\n* webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:2126",
        "url": "https://access.redhat.com/errata/RHSA-2024:2126"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.4_release_notes/index",
        "url": "https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.4_release_notes/index"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2241400",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241400"
      },
      {
        "category": "external",
        "summary": "2253058",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253058"
      },
      {
        "category": "external",
        "summary": "2254326",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254326"
      },
      {
        "category": "external",
        "summary": "2254327",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254327"
      },
      {
        "category": "external",
        "summary": "2270143",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270143"
      },
      {
        "category": "external",
        "summary": "2270151",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270151"
      },
      {
        "category": "external",
        "summary": "2271449",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271449"
      },
      {
        "category": "external",
        "summary": "2271453",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271453"
      },
      {
        "category": "external",
        "summary": "2271456",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271456"
      },
      {
        "category": "external",
        "summary": "2314696",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314696"
      },
      {
        "category": "external",
        "summary": "RHEL-3960",
        "url": "https://issues.redhat.com/browse/RHEL-3960"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2126.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security update",
    "tracking": {
      "current_release_date": "2026-03-18T02:25:40+00:00",
      "generator": {
        "date": "2026-03-18T02:25:40+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.3"
        }
      },
      "id": "RHSA-2024:2126",
      "initial_release_date": "2024-04-30T10:37:42+00:00",
      "revision_history": [
        {
          "date": "2024-04-30T10:37:42+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-03-19T21:01:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-03-18T02:25:40+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.4.0.GA",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.42.5-1.el9.src",
                "product": {
                  "name": "webkit2gtk3-0:2.42.5-1.el9.src",
                  "product_id": "webkit2gtk3-0:2.42.5-1.el9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.42.5-1.el9?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.42.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.42.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.42.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.42.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.42.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.42.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.42.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.42.5-1.el9?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.42.5-1.el9?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.42.5-1.el9?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.42.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-devel-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.42.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.42.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.42.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.42.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.42.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.42.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.42.5-1.el9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.42.5-1.el9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.42.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.42.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.42.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.42.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.42.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.42.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.42.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.42.5-1.el9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.42.5-1.el9?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.42.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.42.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.42.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.42.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.42.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.42.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.42.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.42.5-1.el9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.42.5-1.el9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.42.5-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src"
        },
        "product_reference": "webkit2gtk3-0:2.42.5-1.el9.src",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.GA"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-1745",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2024-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2270151"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in the SVG implementation within WebKitGTK. This flaw allows remote attackers to exploit the removal of an SVGFontFaceElement object, which occurs through specific vectors that trigger the deletion of the object during rendering.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-1745"
        },
        {
          "category": "external",
          "summary": "RHBZ#2270151",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270151"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-1745",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-1745"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-1745",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-1745"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0001.html"
        }
      ],
      "release_date": "2024-02-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing a file may lead to a denial of service or potentially disclose memory contents"
    },
    {
      "cve": "CVE-2023-32359",
      "discovery_date": "2024-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271449"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in webkitgtk where a user\u2019s password may be read aloud by a text-to-speech accessibility feature.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: User password may be read aloud by a text-to-speech accessibility feature",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-32359"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271449",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271449"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-32359",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-32359"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-32359",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32359"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0010.html"
        }
      ],
      "release_date": "2023-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: User password may be read aloud by a text-to-speech accessibility feature"
    },
    {
      "cve": "CVE-2023-39928",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2023-09-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2241400"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability was found in the WebKitGTK\u0027s MediaRecorder API that may lead to memory corruption and Remote Code Execution. The victim needs to access a malicious web page to trigger this vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-39928"
        },
        {
          "category": "external",
          "summary": "RHBZ#2241400",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2241400"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-39928",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-39928"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-39928",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39928"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0009.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0009.html"
        }
      ],
      "release_date": "2023-09-28T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: use-after-free in the MediaRecorder API of the WebKit GStreamer-based ports"
    },
    {
      "cve": "CVE-2023-40414",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2024-03-18T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2270143"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in WebKitGTK and WPE WebKit could allow an attacker to execute arbitrary code on a target system. The issue arises from a use-after-free flaw in memory management when processing web content. This flaw can potentially give attackers the ability to take control of affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Imporatant because it affects the confidentiality, integrity, and availability (CIA) of systems, with a high severity rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-40414"
        },
        {
          "category": "external",
          "summary": "RHBZ#2270143",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270143"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-40414",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-40414"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-40414",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40414"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0001.html"
        }
      ],
      "release_date": "2024-02-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-41983",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2024-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271453"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in WebKitGTK and WPE WebKit may result in a denial-of-service when processing web content. This issue arises from improper memory handling, which could be exploited by attackers to crash the affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing web content may lead to a denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-41983"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271453",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271453"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-41983",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-41983"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-41983",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41983"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0010.html"
        }
      ],
      "release_date": "2023-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Processing web content may lead to a denial of service"
    },
    {
      "cve": "CVE-2023-42852",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2024-03-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2271456"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK and WPE WebKit, which allows remote attacker to perform arbitrary code execution when processing web content. This vulnerability caused by insufficient checks, which could be exploited by attackers to execute malicious code on affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated important because it affects the confidentiality, integrity, and availability (CIA) of systems, with a high severity rating.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-42852"
        },
        {
          "category": "external",
          "summary": "RHBZ#2271456",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2271456"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-42852",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-42852"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42852",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42852"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0010.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0010.html"
        }
      ],
      "release_date": "2023-11-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-42875",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2025-05-15T12:59:19.828000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366497"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-42875"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366497",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366497"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-42875",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-42875"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42875",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42875"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0004.html"
        }
      ],
      "release_date": "2025-05-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-42883",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2023-12-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2254326"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue exists due to a boundary error when processing a malicious image, which could result in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: processing a malicious image may lead to a denial of service",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-42883"
        },
        {
          "category": "external",
          "summary": "RHBZ#2254326",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254326"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-42883",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-42883"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42883",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42883"
        }
      ],
      "release_date": "2023-12-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: processing a malicious image may lead to a denial of service"
    },
    {
      "cve": "CVE-2023-42890",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "discovery_date": "2023-12-13T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2254327"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. This issue exists due to a boundary error when processing malicious HTML content in WebKit, which could result in memory corruption and arbitrary code execution on the target system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: processing malicious web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "While the discovered flaw in WebKitGTK does indeed present a concerning potential for arbitrary code execution due to memory corruption, its severity is assessed as moderate rather than critical for several reasons. Firstly, successful exploitation of the vulnerability requires the user to interact with malicious HTML content, typically through visiting a compromised website. This dependency on user interaction reduces the likelihood of widespread exploitation compared to vulnerabilities that can be remotely exploited without user interaction. Additionally, the impact of the flaw may be mitigated by various security measures such as sandboxing or Content Security Policy (CSP) enforcement, which can limit the execution environment for potentially malicious code.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-42890"
        },
        {
          "category": "external",
          "summary": "RHBZ#2254327",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2254327"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-42890",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-42890"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42890",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42890"
        }
      ],
      "release_date": "2023-12-12T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: processing malicious web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-42917",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2023-12-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2253058"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA\u0027s KEV catalog.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Arbitrary Remote Code Execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "All versions of Red Hat Enterprise Linux are affected to this vulnerability. To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw was rated with an important, and not critical, severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-42917"
        },
        {
          "category": "external",
          "summary": "RHBZ#2253058",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253058"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-42917",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-42917"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42917",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42917"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2023-0011.html",
          "url": "https://webkitgtk.org/security/WSA-2023-0011.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2023-12-05T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2023-12-04T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Arbitrary Remote Code Execution"
    },
    {
      "cve": "CVE-2023-42970",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2025-05-15T13:01:32.590000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2366498"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-42970"
        },
        {
          "category": "external",
          "summary": "RHBZ#2366498",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2366498"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-42970",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-42970"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-42970",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42970"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0004.html"
        }
      ],
      "release_date": "2025-05-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2023-43000",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2025-11-21T12:36:58.206000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416324"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory management and result in memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-43000"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416324",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416324"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-43000",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-43000"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43000",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43000"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0008.html"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2025-11-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2026-03-05T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2024-23271",
      "cwe": {
        "id": "CWE-942",
        "name": "Permissive Cross-domain Security Policy with Untrusted Domains"
      },
      "discovery_date": "2024-09-25T15:33:21.499000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314696"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKit. This flaw allows a remote attacker to trigger unexpected cross-origin behavior via a malicious website.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A malicious website may cause unexpected cross-origin behavior",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
          "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
          "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-23271"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314696",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314696"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-23271",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-23271"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23271",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23271"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0005.html"
        }
      ],
      "release_date": "2024-09-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-04-30T10:37:42+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:2126"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.src",
            "AppStream-9.4.0.GA:webkit2gtk3-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-debugsource-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-devel-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-debuginfo-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-0:2.42.5-1.el9.x86_64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.aarch64",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.i686",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.ppc64le",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.s390x",
            "AppStream-9.4.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.42.5-1.el9.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A malicious website may cause unexpected cross-origin behavior"
    }
  ]
}

RHSA-2024:8180

Vulnerability from csaf_redhat - Published: 2024-10-16 13:09 - Updated: 2026-04-13 08:44

Summary

Red Hat Security Advisory: webkit2gtk3 security update

Severity

Important

Notes

Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkit: malicious website may exfiltrate audio data cross-origin (CVE-2024-23254) * webkit: processing malicious web content prevents Content Security Policy from being enforced (CVE-2024-23263) * webkit: maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23280) * webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced (CVE-2024-23284) * chromium-browser: Use after free in ANGLE (CVE-2024-4558) * webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789) * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780) * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779) * webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782) * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866) * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820) * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838) * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851) * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187) * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185) * webkit: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54534) * webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution (CVE-2024-27856) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2023-43010

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2024-4558

There's a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.

7.0 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix

Threats

Impact Important

CVE-2024-23254

A vulnerability was found in WebKit, where a remote attacker is able to exfiltrate audio data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2024-23263

A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic issue by convincing a victim to visit a specially crafted website. This results in the attacker evading the Content Security Policy enforcement.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2024-23280

A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions through an injection issue by persuading a victim to access a specially crafted website, enabling the attackers to fingerprint the user.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2024-23284

A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic flaw by persuading a victim to access a specially crafted website, enabling attackers to circumvent the Content Security Policy enforcement.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2024-27820

A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2024-27838

A flaw was found in WebKit. This vulnerability allows a maliciously crafted webpage to fingerprint the user.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-27851

A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2024-27856

A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2024-40776

A vulnerability was found in WebKitGTK. A use-after-free may lead to Remote Code Execution. Users are advised to avoid processing untrusted web content in WebKitGTK.

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-40779

A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-40780

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-40782

A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-40789

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-40866

A flaw was found in WebKit. This flaw allows a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. The attacker could perform address bar spoofing by tricking a victim into visiting a specially crafted website.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-44185

A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to the program crashing. Code execution is not discarded as a consequence.

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-788 - Access of Memory Location After End of Buffer

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2024-44187

A vulnerability was found in WebKit. This flaw allows a remote attacker to exfiltrate data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2024-54534

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-43480

A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to improper checks.

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Fixed 46 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Moderate

References

127 references

URL	Category
https://access.redhat.com/errata/RHSA-2024:8180	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270289	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270290	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270291	external
https://bugzilla.redhat.com/show_bug.cgi?id=2270292	external
https://bugzilla.redhat.com/show_bug.cgi?id=2279689	external
https://bugzilla.redhat.com/show_bug.cgi?id=2301841	external
https://bugzilla.redhat.com/show_bug.cgi?id=2302067	external
https://bugzilla.redhat.com/show_bug.cgi?id=2302069	external
https://bugzilla.redhat.com/show_bug.cgi?id=2302070	external
https://bugzilla.redhat.com/show_bug.cgi?id=2302071	external
https://bugzilla.redhat.com/show_bug.cgi?id=2312724	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314698	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314702	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314704	external
https://bugzilla.redhat.com/show_bug.cgi?id=2314706	external
https://bugzilla.redhat.com/show_bug.cgi?id=2323263	external
https://bugzilla.redhat.com/show_bug.cgi?id=2333846	external
https://bugzilla.redhat.com/show_bug.cgi?id=2344618	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2023-43010	self
https://bugzilla.redhat.com/show_bug.cgi?id=2448778	external
https://www.cve.org/CVERecord?id=CVE-2023-43010	external
https://nvd.nist.gov/vuln/detail/CVE-2023-43010	external
https://webkitgtk.org/security/WSA-2026-0001.html	external
https://access.redhat.com/security/cve/CVE-2024-4558	self
https://bugzilla.redhat.com/show_bug.cgi?id=2279689	external
https://www.cve.org/CVERecord?id=CVE-2024-4558	external
https://nvd.nist.gov/vuln/detail/CVE-2024-4558	external
https://access.redhat.com/security/cve/CVE-2024-23254	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270289	external
https://www.cve.org/CVERecord?id=CVE-2024-23254	external
https://nvd.nist.gov/vuln/detail/CVE-2024-23254	external
https://seclists.org/fulldisclosure/2024/Mar/21	external
https://access.redhat.com/security/cve/CVE-2024-23263	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270290	external
https://www.cve.org/CVERecord?id=CVE-2024-23263	external
https://nvd.nist.gov/vuln/detail/CVE-2024-23263	external
https://access.redhat.com/security/cve/CVE-2024-23280	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270291	external
https://www.cve.org/CVERecord?id=CVE-2024-23280	external
https://nvd.nist.gov/vuln/detail/CVE-2024-23280	external
https://access.redhat.com/security/cve/CVE-2024-23284	self
https://bugzilla.redhat.com/show_bug.cgi?id=2270292	external
https://www.cve.org/CVERecord?id=CVE-2024-23284	external
https://nvd.nist.gov/vuln/detail/CVE-2024-23284	external
https://access.redhat.com/security/cve/CVE-2024-27820	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314698	external
https://www.cve.org/CVERecord?id=CVE-2024-27820	external
https://nvd.nist.gov/vuln/detail/CVE-2024-27820	external
https://webkitgtk.org/security/WSA-2024-0005.html	external
https://access.redhat.com/security/cve/CVE-2024-27838	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314702	external
https://www.cve.org/CVERecord?id=CVE-2024-27838	external
https://nvd.nist.gov/vuln/detail/CVE-2024-27838	external
https://access.redhat.com/security/cve/CVE-2024-27851	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314704	external
https://www.cve.org/CVERecord?id=CVE-2024-27851	external
https://nvd.nist.gov/vuln/detail/CVE-2024-27851	external
https://access.redhat.com/security/cve/CVE-2024-27856	self
https://bugzilla.redhat.com/show_bug.cgi?id=2344618	external
https://www.cve.org/CVERecord?id=CVE-2024-27856	external
https://nvd.nist.gov/vuln/detail/CVE-2024-27856	external
https://support.apple.com/en-us/120896	external
https://support.apple.com/en-us/120898	external
https://support.apple.com/en-us/120901	external
https://support.apple.com/en-us/120902	external
https://support.apple.com/en-us/120903	external
https://support.apple.com/en-us/120905	external
https://support.apple.com/en-us/120906	external
https://webkitgtk.org/security/WSA-2025-0001.html	external
https://access.redhat.com/security/cve/CVE-2024-40776	self
https://bugzilla.redhat.com/show_bug.cgi?id=2301841	external
https://www.cve.org/CVERecord?id=CVE-2024-40776	external
https://nvd.nist.gov/vuln/detail/CVE-2024-40776	external
https://webkitgtk.org/security/WSA-2024-0004.html	external
https://access.redhat.com/security/cve/CVE-2024-40779	self
https://bugzilla.redhat.com/show_bug.cgi?id=2302070	external
https://www.cve.org/CVERecord?id=CVE-2024-40779	external
https://nvd.nist.gov/vuln/detail/CVE-2024-40779	external
https://webkitgtk.org/security/WSA-2024-0004.html…	external
https://access.redhat.com/security/cve/CVE-2024-40780	self
https://bugzilla.redhat.com/show_bug.cgi?id=2302069	external
https://www.cve.org/CVERecord?id=CVE-2024-40780	external
https://nvd.nist.gov/vuln/detail/CVE-2024-40780	external
https://webkitgtk.org/security/WSA-2024-0004.html…	external
https://access.redhat.com/security/cve/CVE-2024-40782	self
https://bugzilla.redhat.com/show_bug.cgi?id=2302071	external
https://www.cve.org/CVERecord?id=CVE-2024-40782	external
https://nvd.nist.gov/vuln/detail/CVE-2024-40782	external
https://webkitgtk.org/security/WSA-2024-0004.html…	external
https://access.redhat.com/security/cve/CVE-2024-40789	self
https://bugzilla.redhat.com/show_bug.cgi?id=2302067	external
https://www.cve.org/CVERecord?id=CVE-2024-40789	external
https://nvd.nist.gov/vuln/detail/CVE-2024-40789	external
https://webkitgtk.org/security/WSA-2024-0004.html…	external
https://access.redhat.com/security/cve/CVE-2024-40866	self
https://bugzilla.redhat.com/show_bug.cgi?id=2312724	external
https://www.cve.org/CVERecord?id=CVE-2024-40866	external
https://nvd.nist.gov/vuln/detail/CVE-2024-40866	external
https://support.apple.com/en-us/121238	external
https://support.apple.com/en-us/121241	external
https://access.redhat.com/security/cve/CVE-2024-44185	self
https://bugzilla.redhat.com/show_bug.cgi?id=2323263	external
https://www.cve.org/CVERecord?id=CVE-2024-44185	external
https://nvd.nist.gov/vuln/detail/CVE-2024-44185	external
https://webkitgtk.org/security/WSA-2024-0006.html	external
https://access.redhat.com/security/cve/CVE-2024-44187	self
https://bugzilla.redhat.com/show_bug.cgi?id=2314706	external
https://www.cve.org/CVERecord?id=CVE-2024-44187	external
https://nvd.nist.gov/vuln/detail/CVE-2024-44187	external
https://access.redhat.com/security/cve/CVE-2024-54534	self
https://bugzilla.redhat.com/show_bug.cgi?id=2333846	external
https://www.cve.org/CVERecord?id=CVE-2024-54534	external
https://nvd.nist.gov/vuln/detail/CVE-2024-54534	external
https://support.apple.com/en-us/121837	external
https://support.apple.com/en-us/121839	external
https://support.apple.com/en-us/121843	external
https://support.apple.com/en-us/121844	external
https://support.apple.com/en-us/121845	external
https://support.apple.com/en-us/121846	external
https://access.redhat.com/security/cve/CVE-2025-43480	self
https://bugzilla.redhat.com/show_bug.cgi?id=2416338	external
https://www.cve.org/CVERecord?id=CVE-2025-43480	external
https://nvd.nist.gov/vuln/detail/CVE-2025-43480	external
https://webkitgtk.org/security/WSA-2025-0008.html	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkit: malicious website may exfiltrate audio data cross-origin (CVE-2024-23254)\n\n* webkit: processing malicious web content prevents Content Security Policy from being enforced (CVE-2024-23263)\n\n* webkit: maliciously crafted webpage may be able to fingerprint the user (CVE-2024-23280)\n\n* webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced (CVE-2024-23284)\n\n* chromium-browser: Use after free in ANGLE (CVE-2024-4558)\n\n* webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution (CVE-2024-40776)\n\n* webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)\n\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)\n\n* webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)\n\n* webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)\n\n* webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)\n\n* webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)\n\n* webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)\n\n* webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)\n\n* webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)\n\n* webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185)\n\n* webkit: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54534)\n\n* webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution (CVE-2024-27856)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2024:8180",
        "url": "https://access.redhat.com/errata/RHSA-2024:8180"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2270289",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270289"
      },
      {
        "category": "external",
        "summary": "2270290",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270290"
      },
      {
        "category": "external",
        "summary": "2270291",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270291"
      },
      {
        "category": "external",
        "summary": "2270292",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270292"
      },
      {
        "category": "external",
        "summary": "2279689",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279689"
      },
      {
        "category": "external",
        "summary": "2301841",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301841"
      },
      {
        "category": "external",
        "summary": "2302067",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302067"
      },
      {
        "category": "external",
        "summary": "2302069",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302069"
      },
      {
        "category": "external",
        "summary": "2302070",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302070"
      },
      {
        "category": "external",
        "summary": "2302071",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302071"
      },
      {
        "category": "external",
        "summary": "2312724",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312724"
      },
      {
        "category": "external",
        "summary": "2314698",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314698"
      },
      {
        "category": "external",
        "summary": "2314702",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314702"
      },
      {
        "category": "external",
        "summary": "2314704",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314704"
      },
      {
        "category": "external",
        "summary": "2314706",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314706"
      },
      {
        "category": "external",
        "summary": "2323263",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2323263"
      },
      {
        "category": "external",
        "summary": "2333846",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333846"
      },
      {
        "category": "external",
        "summary": "2344618",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344618"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8180.json"
      }
    ],
    "title": "Red Hat Security Advisory: webkit2gtk3 security update",
    "tracking": {
      "current_release_date": "2026-04-13T08:44:38+00:00",
      "generator": {
        "date": "2026-04-13T08:44:38+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.7.5"
        }
      },
      "id": "RHSA-2024:8180",
      "initial_release_date": "2024-10-16T13:09:14+00:00",
      "revision_history": [
        {
          "date": "2024-10-16T13:09:14+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-03-20T19:16:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-04-13T08:44:38+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.4.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.46.1-2.el9_4.src",
                "product": {
                  "name": "webkit2gtk3-0:2.46.1-2.el9_4.src",
                  "product_id": "webkit2gtk3-0:2.46.1-2.el9_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "webkit2gtk3-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
                "product": {
                  "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
                  "product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.46.1-2.el9_4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.46.1-2.el9_4.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src"
        },
        "product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.src",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        },
        "product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-43010",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2026-03-18T19:58:01.296000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2448778"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into processing or loading malicious web content. Due to this reason, this flaw has been rated with an important severity.\nAdditionally, this issue can cause memory corruption and the possibility of remote code execution is not discarded.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-43010"
        },
        {
          "category": "external",
          "summary": "RHBZ#2448778",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448778"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2023-43010",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-43010"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-43010",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43010"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2026-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2026-0001.html"
        }
      ],
      "release_date": "2026-03-18T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2024-4558",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2024-05-08T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2279689"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "There\u0027s a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "chromium-browser: Use after free in ANGLE",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-4558"
        },
        {
          "category": "external",
          "summary": "RHBZ#2279689",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2279689"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-4558",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-4558"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-4558",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4558"
        }
      ],
      "release_date": "2024-05-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.0,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "chromium-browser: Use after free in ANGLE"
    },
    {
      "cve": "CVE-2024-23254",
      "discovery_date": "2024-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2270289"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKit, where a remote attacker is able to exfiltrate audio data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkit: malicious website may exfiltrate audio data cross-origin",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-23254"
        },
        {
          "category": "external",
          "summary": "RHBZ#2270289",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270289"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-23254",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-23254"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23254",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23254"
        },
        {
          "category": "external",
          "summary": "https://seclists.org/fulldisclosure/2024/Mar/21",
          "url": "https://seclists.org/fulldisclosure/2024/Mar/21"
        }
      ],
      "release_date": "2024-03-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkit: malicious website may exfiltrate audio data cross-origin"
    },
    {
      "cve": "CVE-2024-23263",
      "discovery_date": "2024-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2270290"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic issue by convincing a victim to visit a specially crafted website. This results in the attacker evading the Content Security Policy enforcement.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkit: processing malicious web content prevents Content Security Policy from being enforced",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-23263"
        },
        {
          "category": "external",
          "summary": "RHBZ#2270290",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270290"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-23263",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-23263"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23263",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23263"
        },
        {
          "category": "external",
          "summary": "https://seclists.org/fulldisclosure/2024/Mar/21",
          "url": "https://seclists.org/fulldisclosure/2024/Mar/21"
        }
      ],
      "release_date": "2024-03-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkit: processing malicious web content prevents Content Security Policy from being enforced"
    },
    {
      "cve": "CVE-2024-23280",
      "discovery_date": "2024-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2270291"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions through an injection issue by persuading a victim to access a specially crafted website, enabling the attackers to fingerprint the user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkit: maliciously crafted webpage may be able to fingerprint the user",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-23280"
        },
        {
          "category": "external",
          "summary": "RHBZ#2270291",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270291"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-23280",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-23280"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23280",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23280"
        },
        {
          "category": "external",
          "summary": "https://seclists.org/fulldisclosure/2024/Mar/21",
          "url": "https://seclists.org/fulldisclosure/2024/Mar/21"
        }
      ],
      "release_date": "2024-03-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkit: maliciously crafted webpage may be able to fingerprint the user"
    },
    {
      "cve": "CVE-2024-23284",
      "discovery_date": "2024-03-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2270292"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKit. This flaw allows remote attackers to bypass security restrictions due to a logic flaw by persuading a victim to access a specially crafted website, enabling attackers to circumvent the Content Security Policy enforcement.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-23284"
        },
        {
          "category": "external",
          "summary": "RHBZ#2270292",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2270292"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-23284",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-23284"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-23284",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23284"
        },
        {
          "category": "external",
          "summary": "https://seclists.org/fulldisclosure/2024/Mar/21",
          "url": "https://seclists.org/fulldisclosure/2024/Mar/21"
        }
      ],
      "release_date": "2024-03-07T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkit: processing maliciously crafted web content prevents Content Security Policy from being enforced"
    },
    {
      "cve": "CVE-2024-27820",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2024-09-25T15:37:48.081000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314698"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-27820"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314698",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314698"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-27820",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-27820"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27820",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27820"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0005.html"
        }
      ],
      "release_date": "2024-09-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2024-27838",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2024-09-25T15:42:35.706000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314702"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKit. This vulnerability allows a maliciously crafted webpage to fingerprint the user.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A maliciously crafted webpage may be able to fingerprint the user",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-27838"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314702",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314702"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-27838",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-27838"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27838",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27838"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0005.html"
        }
      ],
      "release_date": "2024-09-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A maliciously crafted webpage may be able to fingerprint the user"
    },
    {
      "cve": "CVE-2024-27851",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2024-09-25T15:44:41.235000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314704"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient bounds checks, which could be exploited by attackers to execute malicious code on affected systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users\u0027 systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-27851"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314704",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314704"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-27851",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-27851"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0005.html"
        }
      ],
      "release_date": "2024-09-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution"
    },
    {
      "cve": "CVE-2024-27856",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2025-02-10T09:34:34.705418+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2344618"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause unexpected app termination or arbitrary code execution due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-27856"
        },
        {
          "category": "external",
          "summary": "RHBZ#2344618",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2344618"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-27856",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-27856"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-27856",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27856"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/120896",
          "url": "https://support.apple.com/en-us/120896"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/120898",
          "url": "https://support.apple.com/en-us/120898"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/120901",
          "url": "https://support.apple.com/en-us/120901"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/120902",
          "url": "https://support.apple.com/en-us/120902"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/120903",
          "url": "https://support.apple.com/en-us/120903"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/120905",
          "url": "https://support.apple.com/en-us/120905"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/120906",
          "url": "https://support.apple.com/en-us/120906"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0001.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0001.html"
        }
      ],
      "release_date": "2025-01-15T19:35:57.075000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: Processing a file may lead to unexpected app termination or arbitrary code execution"
    },
    {
      "cve": "CVE-2024-40776",
      "discovery_date": "2024-07-30T20:48:03+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2301841"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK. A use-after-free may lead to Remote Code Execution. Users are advised to avoid processing untrusted web content in WebKitGTK.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40776"
        },
        {
          "category": "external",
          "summary": "RHBZ#2301841",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2301841"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40776",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40776"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40776",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40776"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0004.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0004.html"
        }
      ],
      "release_date": "2024-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution"
    },
    {
      "cve": "CVE-2024-40779",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-07-31T15:05:50+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2302070"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40779"
        },
        {
          "category": "external",
          "summary": "RHBZ#2302070",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302070"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40779",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40779"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40779",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40779"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779",
          "url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779"
        }
      ],
      "release_date": "2024-07-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking"
    },
    {
      "cve": "CVE-2024-40780",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-07-31T15:07:22+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2302069"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40780"
        },
        {
          "category": "external",
          "summary": "RHBZ#2302069",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302069"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40780",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40780"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40780",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40780"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780",
          "url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780"
        }
      ],
      "release_date": "2024-07-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking"
    },
    {
      "cve": "CVE-2024-40782",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2024-07-31T14:57:24+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2302071"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger a use-after-free issue due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40782"
        },
        {
          "category": "external",
          "summary": "RHBZ#2302071",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302071"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40782",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40782"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40782",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40782"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782",
          "url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782"
        }
      ],
      "release_date": "2024-07-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management"
    },
    {
      "cve": "CVE-2024-40789",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2024-07-31T15:39:05+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2302067"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can trigger an out-of-bounds read due to improper bounds checking, causing an unexpected process crash, resulting in a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40789"
        },
        {
          "category": "external",
          "summary": "RHBZ#2302067",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302067"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40789",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40789"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40789",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40789"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789",
          "url": "https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789"
        }
      ],
      "release_date": "2024-07-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash"
    },
    {
      "cve": "CVE-2024-40866",
      "discovery_date": "2024-09-17T00:31:06.549134+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2312724"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKit. This flaw allows a remote attacker to conduct spoofing attacks by exploiting an inconsistent user interface issue. The attacker could perform address bar spoofing by tricking a victim into visiting a specially crafted website.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: Visiting a malicious website may lead to address bar spoofing",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-40866"
        },
        {
          "category": "external",
          "summary": "RHBZ#2312724",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2312724"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-40866",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-40866"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-40866",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40866"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/121238",
          "url": "https://support.apple.com/en-us/121238"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/121241",
          "url": "https://support.apple.com/en-us/121241"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0005.html"
        }
      ],
      "release_date": "2024-09-17T00:15:49.840000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: Visiting a malicious website may lead to address bar spoofing"
    },
    {
      "cve": "CVE-2024-44185",
      "cwe": {
        "id": "CWE-788",
        "name": "Access of Memory Location After End of Buffer"
      },
      "discovery_date": "2024-11-01T20:05:39.339000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2323263"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKitGTK, where processing maliciously crafted web content may lead to the program crashing. Code execution is not discarded as a consequence.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as important severity because it allows maliciously crafted web content to crash the application, potentially leads to denial of service. While it does not compromise confidentiality or integrity, the ability to crash the program without requiring authentication poses a significant risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-44185"
        },
        {
          "category": "external",
          "summary": "RHBZ#2323263",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2323263"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-44185",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-44185"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-44185",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44185"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0006.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0006.html"
        }
      ],
      "release_date": "2024-10-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash"
    },
    {
      "cve": "CVE-2024-44187",
      "discovery_date": "2024-09-25T15:50:57.927000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2314706"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in WebKit. This flaw allows a remote attacker to exfiltrate data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A malicious website may exfiltrate data cross-origin",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-44187"
        },
        {
          "category": "external",
          "summary": "RHBZ#2314706",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2314706"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-44187",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-44187"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-44187",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44187"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2024-0005.html",
          "url": "https://webkitgtk.org/security/WSA-2024-0005.html"
        }
      ],
      "release_date": "2024-09-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A malicious website may exfiltrate data cross-origin"
    },
    {
      "cve": "CVE-2024-54534",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2024-12-23T13:18:32.596325+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2333846"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkit: Processing maliciously crafted web content may lead to memory corruption",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-54534"
        },
        {
          "category": "external",
          "summary": "RHBZ#2333846",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2333846"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-54534",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-54534"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54534"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/121837",
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/121839",
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/121843",
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/121844",
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/121845",
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "category": "external",
          "summary": "https://support.apple.com/en-us/121846",
          "url": "https://support.apple.com/en-us/121846"
        }
      ],
      "release_date": "2024-12-11T22:58:39.974000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "webkit: Processing maliciously crafted web content may lead to memory corruption"
    },
    {
      "cve": "CVE-2025-43480",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2025-11-21T12:52:14.645000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in WebKitGTK. A malicious website may exfiltrate data cross-origin due to improper checks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "webkitgtk: A malicious website may exfiltrate data cross-origin",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to trick a user into visiting a malicious website, potentially exposing sensitive information. Due to this reason, this flaw has been rated with a moderate severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
          "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-43480"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-43480",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-43480"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-43480",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43480"
        },
        {
          "category": "external",
          "summary": "https://webkitgtk.org/security/WSA-2025-0008.html",
          "url": "https://webkitgtk.org/security/WSA-2025-0008.html"
        }
      ],
      "release_date": "2025-11-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-10-16T13:09:14+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2024:8180"
        },
        {
          "category": "workaround",
          "details": "Do not visit untrusted websites. Also, do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi, and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and used via a graphical interface to process untrusted web content, via GNOME, for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
          "product_ids": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.src",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.i686",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x",
            "AppStream-9.4.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "webkitgtk: A malicious website may exfiltrate data cross-origin"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-23271 (GCVE-0-2024-23271)

Solutions

Solutions

Vulnerability from osv_almalinux

Vulnerability from osv_almalinux

Tags

Sightings

Nomenclature