{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
         },
      },
      lang: "nl",
      notes: [
         {
            category: "legal_disclaimer",
            text: "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.",
         },
         {
            category: "description",
            text: "Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.",
            title: "Feiten",
         },
         {
            category: "description",
            text: "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- (Remote) code execution (Administrator/Root rechten)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot gevoelige gegevens\n- Toegang tot systeemgegevens\n- Verhoogde gebruikersrechten",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren en draaien, of een malafide link te volgen.",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in iOS en iPadOS 17.5",
            title: "Oplossingen",
         },
         {
            category: "general",
            text: "medium",
            title: "Kans",
         },
         {
            category: "general",
            text: "high",
            title: "Schade",
         },
         {
            category: "general",
            text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
            title: "CWE-119",
         },
         {
            category: "general",
            text: "Exposure of Sensitive Information to an Unauthorized Actor",
            title: "CWE-200",
         },
         {
            category: "general",
            text: "Improper Access Control",
            title: "CWE-284",
         },
      ],
      publisher: {
         category: "coordinator",
         contact_details: "cert@ncsc.nl",
         name: "Nationaal Cyber Security Centrum",
         namespace: "https://www.ncsc.nl/",
      },
      references: [
         {
            category: "external",
            summary: "Source - apple",
            url: "https://support.apple.com/en-us/HT214101",
         },
      ],
      title: "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
      tracking: {
         current_release_date: "2024-05-15T12:47:39.940581Z",
         id: "NCSC-2024-0219",
         initial_release_date: "2024-05-15T12:47:39.940581Z",
         revision_history: [
            {
               date: "2024-05-15T12:47:39.940581Z",
               number: "0",
               summary: "Initiele versie",
            },
         ],
         status: "final",
         version: "1.0.0",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "ios_and_ipados",
                  product: {
                     name: "ios_and_ipados",
                     product_id: "CSAFPID-551327",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "apple",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-27804",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27804",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27804.json",
            },
         ],
         title: "CVE-2024-27804",
      },
      {
         cve: "CVE-2024-27816",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27816",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27816.json",
            },
         ],
         title: "CVE-2024-27816",
      },
      {
         cve: "CVE-2024-27841",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27841",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27841.json",
            },
         ],
         title: "CVE-2024-27841",
      },
      {
         cve: "CVE-2024-27839",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27839",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27839.json",
            },
         ],
         title: "CVE-2024-27839",
      },
      {
         cve: "CVE-2024-27818",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27818",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27818.json",
            },
         ],
         title: "CVE-2024-27818",
      },
      {
         cve: "CVE-2023-42893",
         references: [
            {
               category: "self",
               summary: "CVE-2023-42893",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42893.json",
            },
         ],
         title: "CVE-2023-42893",
      },
      {
         cve: "CVE-2024-27810",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27810",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27810.json",
            },
         ],
         title: "CVE-2024-27810",
      },
      {
         cve: "CVE-2024-27852",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27852",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27852.json",
            },
         ],
         title: "CVE-2024-27852",
      },
      {
         cve: "CVE-2024-27835",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27835",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27835.json",
            },
         ],
         title: "CVE-2024-27835",
      },
      {
         cve: "CVE-2024-27803",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27803",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27803.json",
            },
         ],
         title: "CVE-2024-27803",
      },
      {
         cve: "CVE-2024-27821",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27821",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27821.json",
            },
         ],
         title: "CVE-2024-27821",
      },
      {
         cve: "CVE-2024-27847",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27847",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27847.json",
            },
         ],
         title: "CVE-2024-27847",
      },
      {
         cve: "CVE-2024-27796",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27796",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27796.json",
            },
         ],
         title: "CVE-2024-27796",
      },
      {
         cve: "CVE-2024-27834",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         notes: [
            {
               category: "other",
               text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
               title: "CWE-119",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27834",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27834.json",
            },
         ],
         title: "CVE-2024-27834",
      },
   ],
}

{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
         },
      },
      lang: "nl",
      notes: [
         {
            category: "legal_disclaimer",
            text: "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.",
         },
         {
            category: "description",
            text: "Apple heeft kwetsbaarheden verholpen in MacOS.",
            title: "Feiten",
         },
         {
            category: "description",
            text: "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- Omzeilen van beveiligingsmaatregel\n- (Remote) code execution (Gebruikersrechten)\n- (Remote) code execution (Administrator/Root rechten)\n- Toegang tot gevoelige gegevens\n- Toegang tot systeemgegevens\n- Verhoogde gebruikersrechten",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Van de kwetsbaarheid met kenmerk CVE-2024-23296 geeft Apple aan informatie te hebben dat deze beperkt en gericht is misbruikt. De kwetsbaarheid bevindt zich in de module RTKit en stelt een lokale kwaadwillende, met rechten om kernelgeheugen te lezen en te schrijven, de geheugenbescherming van de kernel te omzeilen en zo toegang te krijgen tot delen van het werkgeheugen waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in MacOS 14.5, 13.6.7 en 12.7.5",
            title: "Oplossingen",
         },
         {
            category: "general",
            text: "medium",
            title: "Kans",
         },
         {
            category: "general",
            text: "medium",
            title: "Schade",
         },
         {
            category: "general",
            text: "CWE-840",
            title: "CWE-840",
         },
         {
            category: "general",
            text: "CWE-265",
            title: "CWE-265",
         },
         {
            category: "general",
            text: "CWE-371",
            title: "CWE-371",
         },
         {
            category: "general",
            text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
            title: "CWE-119",
         },
         {
            category: "general",
            text: "Improper Access Control",
            title: "CWE-284",
         },
         {
            category: "general",
            text: "Exposure of Sensitive Information to an Unauthorized Actor",
            title: "CWE-200",
         },
         {
            category: "general",
            text: "Improper Authorization",
            title: "CWE-285",
         },
         {
            category: "general",
            text: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
            title: "CWE-757",
         },
      ],
      publisher: {
         category: "coordinator",
         contact_details: "cert@ncsc.nl",
         name: "Nationaal Cyber Security Centrum",
         namespace: "https://www.ncsc.nl/",
      },
      references: [
         {
            category: "external",
            summary: "Source - apple",
            url: "https://support.apple.com/en-us/HT214105",
         },
         {
            category: "external",
            summary: "Source - apple",
            url: "https://support.apple.com/en-us/HT214107",
         },
         {
            category: "external",
            summary: "Source - apple",
            url: "https://support.apple.com/en-us/HT214106",
         },
      ],
      title: "Kwetsbaarheden verholpen in Apple MacOS",
      tracking: {
         current_release_date: "2024-05-15T11:18:13.188010Z",
         id: "NCSC-2024-0217",
         initial_release_date: "2024-05-15T10:50:09.062571Z",
         revision_history: [
            {
               date: "2024-05-15T10:50:09.062571Z",
               number: "0",
               summary: "Initiele versie",
            },
            {
               date: "2024-05-15T11:18:13.188010Z",
               number: "1",
               summary: "Initiele versie",
            },
         ],
         status: "final",
         version: "1.0.1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "macos",
                  product: {
                     name: "macos",
                     product_id: "CSAFPID-2736",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "apple",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-42893",
         product_status: {
            known_affected: [
               "CSAFPID-2736",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2023-42893",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42893.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-2736",
               ],
            },
         ],
         title: "CVE-2023-42893",
      },
      {
         cve: "CVE-2024-23236",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-23236",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23236.json",
            },
         ],
         title: "CVE-2024-23236",
      },
      {
         cve: "CVE-2024-27796",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27796",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27796.json",
            },
         ],
         title: "CVE-2024-27796",
      },
      {
         cve: "CVE-2024-27798",
         cwe: {
            id: "CWE-285",
            name: "Improper Authorization",
         },
         notes: [
            {
               category: "other",
               text: "Improper Authorization",
               title: "CWE-285",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27798",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27798.json",
            },
         ],
         title: "CVE-2024-27798",
      },
      {
         cve: "CVE-2024-27804",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27804",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27804.json",
            },
         ],
         title: "CVE-2024-27804",
      },
      {
         cve: "CVE-2024-27810",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27810",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27810.json",
            },
         ],
         title: "CVE-2024-27810",
      },
      {
         cve: "CVE-2024-27813",
         cwe: {
            id: "CWE-265",
            name: "-",
         },
         notes: [
            {
               category: "other",
               text: "CWE-265",
               title: "CWE-265",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27813",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27813.json",
            },
         ],
         title: "CVE-2024-27813",
      },
      {
         cve: "CVE-2024-27816",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27816",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27816.json",
            },
         ],
         title: "CVE-2024-27816",
      },
      {
         cve: "CVE-2024-27818",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27818",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27818.json",
            },
         ],
         title: "CVE-2024-27818",
      },
      {
         cve: "CVE-2024-27821",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27821",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27821.json",
            },
         ],
         title: "CVE-2024-27821",
      },
      {
         cve: "CVE-2024-27822",
         cwe: {
            id: "CWE-840",
            name: "-",
         },
         notes: [
            {
               category: "other",
               text: "CWE-840",
               title: "CWE-840",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27822",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27822.json",
            },
         ],
         title: "CVE-2024-27822",
      },
      {
         cve: "CVE-2024-27824",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27824",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27824.json",
            },
         ],
         title: "CVE-2024-27824",
      },
      {
         cve: "CVE-2024-27825",
         cwe: {
            id: "CWE-757",
            name: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
         },
         notes: [
            {
               category: "other",
               text: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
               title: "CWE-757",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27825",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27825.json",
            },
         ],
         title: "CVE-2024-27825",
      },
      {
         cve: "CVE-2024-27827",
         cwe: {
            id: "CWE-371",
            name: "-",
         },
         notes: [
            {
               category: "other",
               text: "CWE-371",
               title: "CWE-371",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27827",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27827.json",
            },
         ],
         title: "CVE-2024-27827",
      },
      {
         cve: "CVE-2024-27829",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         notes: [
            {
               category: "other",
               text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
               title: "CWE-119",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27829",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27829.json",
            },
         ],
         title: "CVE-2024-27829",
      },
      {
         cve: "CVE-2024-27834",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         notes: [
            {
               category: "other",
               text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
               title: "CWE-119",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27834",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27834.json",
            },
         ],
         title: "CVE-2024-27834",
      },
      {
         cve: "CVE-2024-27837",
         cwe: {
            id: "CWE-757",
            name: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
         },
         notes: [
            {
               category: "other",
               text: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
               title: "CWE-757",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27837",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27837.json",
            },
         ],
         title: "CVE-2024-27837",
      },
      {
         cve: "CVE-2024-27841",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27841",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27841.json",
            },
         ],
         title: "CVE-2024-27841",
      },
      {
         cve: "CVE-2024-27842",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27842",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27842.json",
            },
         ],
         title: "CVE-2024-27842",
      },
      {
         cve: "CVE-2024-27843",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27843",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27843.json",
            },
         ],
         title: "CVE-2024-27843",
      },
      {
         cve: "CVE-2024-27847",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27847",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27847.json",
            },
         ],
         title: "CVE-2024-27847",
      },
   ],
}

{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
         },
      },
      lang: "nl",
      notes: [
         {
            category: "legal_disclaimer",
            text: "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.",
         },
         {
            category: "description",
            text: "Apple heeft kwetsbaarheden verholpen in MacOS.",
            title: "Feiten",
         },
         {
            category: "description",
            text: "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- Manipulatie van gegevens\n- Omzeilen van beveiligingsmaatregel\n- (Remote) code execution (Gebruikersrechten)\n- (Remote) code execution (Administrator/Root rechten)\n- Toegang tot gevoelige gegevens\n- Toegang tot systeemgegevens\n- Verhoogde gebruikersrechten",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Van de kwetsbaarheid met kenmerk CVE-2024-23296 geeft Apple aan informatie te hebben dat deze beperkt en gericht is misbruikt. De kwetsbaarheid bevindt zich in de module RTKit en stelt een lokale kwaadwillende, met rechten om kernelgeheugen te lezen en te schrijven, de geheugenbescherming van de kernel te omzeilen en zo toegang te krijgen tot delen van het werkgeheugen waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in MacOS 14.5, 13.6.7 en 12.7.5",
            title: "Oplossingen",
         },
         {
            category: "general",
            text: "medium",
            title: "Kans",
         },
         {
            category: "general",
            text: "medium",
            title: "Schade",
         },
         {
            category: "general",
            text: "CWE-840",
            title: "CWE-840",
         },
         {
            category: "general",
            text: "CWE-265",
            title: "CWE-265",
         },
         {
            category: "general",
            text: "CWE-371",
            title: "CWE-371",
         },
         {
            category: "general",
            text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
            title: "CWE-119",
         },
         {
            category: "general",
            text: "Improper Access Control",
            title: "CWE-284",
         },
         {
            category: "general",
            text: "Exposure of Sensitive Information to an Unauthorized Actor",
            title: "CWE-200",
         },
         {
            category: "general",
            text: "Improper Authorization",
            title: "CWE-285",
         },
         {
            category: "general",
            text: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
            title: "CWE-757",
         },
      ],
      publisher: {
         category: "coordinator",
         contact_details: "cert@ncsc.nl",
         name: "Nationaal Cyber Security Centrum",
         namespace: "https://www.ncsc.nl/",
      },
      references: [
         {
            category: "external",
            summary: "Source - apple",
            url: "https://support.apple.com/en-us/HT214105",
         },
         {
            category: "external",
            summary: "Source - apple",
            url: "https://support.apple.com/en-us/HT214107",
         },
         {
            category: "external",
            summary: "Source - apple",
            url: "https://support.apple.com/en-us/HT214106",
         },
      ],
      title: "Kwetsbaarheden verholpen in Apple MacOS",
      tracking: {
         current_release_date: "2024-05-15T11:18:13.188010Z",
         id: "NCSC-2024-0217",
         initial_release_date: "2024-05-15T10:50:09.062571Z",
         revision_history: [
            {
               date: "2024-05-15T10:50:09.062571Z",
               number: "0",
               summary: "Initiele versie",
            },
            {
               date: "2024-05-15T11:18:13.188010Z",
               number: "1",
               summary: "Initiele versie",
            },
         ],
         status: "final",
         version: "1.0.1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "macos",
                  product: {
                     name: "macos",
                     product_id: "CSAFPID-2736",
                     product_identification_helper: {
                        cpe: "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "apple",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-42893",
         product_status: {
            known_affected: [
               "CSAFPID-2736",
            ],
         },
         references: [
            {
               category: "self",
               summary: "CVE-2023-42893",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42893.json",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "CSAFPID-2736",
               ],
            },
         ],
         title: "CVE-2023-42893",
      },
      {
         cve: "CVE-2024-23236",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-23236",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23236.json",
            },
         ],
         title: "CVE-2024-23236",
      },
      {
         cve: "CVE-2024-27796",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27796",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27796.json",
            },
         ],
         title: "CVE-2024-27796",
      },
      {
         cve: "CVE-2024-27798",
         cwe: {
            id: "CWE-285",
            name: "Improper Authorization",
         },
         notes: [
            {
               category: "other",
               text: "Improper Authorization",
               title: "CWE-285",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27798",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27798.json",
            },
         ],
         title: "CVE-2024-27798",
      },
      {
         cve: "CVE-2024-27804",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27804",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27804.json",
            },
         ],
         title: "CVE-2024-27804",
      },
      {
         cve: "CVE-2024-27810",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27810",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27810.json",
            },
         ],
         title: "CVE-2024-27810",
      },
      {
         cve: "CVE-2024-27813",
         cwe: {
            id: "CWE-265",
            name: "-",
         },
         notes: [
            {
               category: "other",
               text: "CWE-265",
               title: "CWE-265",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27813",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27813.json",
            },
         ],
         title: "CVE-2024-27813",
      },
      {
         cve: "CVE-2024-27816",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27816",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27816.json",
            },
         ],
         title: "CVE-2024-27816",
      },
      {
         cve: "CVE-2024-27818",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27818",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27818.json",
            },
         ],
         title: "CVE-2024-27818",
      },
      {
         cve: "CVE-2024-27821",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27821",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27821.json",
            },
         ],
         title: "CVE-2024-27821",
      },
      {
         cve: "CVE-2024-27822",
         cwe: {
            id: "CWE-840",
            name: "-",
         },
         notes: [
            {
               category: "other",
               text: "CWE-840",
               title: "CWE-840",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27822",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27822.json",
            },
         ],
         title: "CVE-2024-27822",
      },
      {
         cve: "CVE-2024-27824",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27824",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27824.json",
            },
         ],
         title: "CVE-2024-27824",
      },
      {
         cve: "CVE-2024-27825",
         cwe: {
            id: "CWE-757",
            name: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
         },
         notes: [
            {
               category: "other",
               text: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
               title: "CWE-757",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27825",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27825.json",
            },
         ],
         title: "CVE-2024-27825",
      },
      {
         cve: "CVE-2024-27827",
         cwe: {
            id: "CWE-371",
            name: "-",
         },
         notes: [
            {
               category: "other",
               text: "CWE-371",
               title: "CWE-371",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27827",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27827.json",
            },
         ],
         title: "CVE-2024-27827",
      },
      {
         cve: "CVE-2024-27829",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         notes: [
            {
               category: "other",
               text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
               title: "CWE-119",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27829",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27829.json",
            },
         ],
         title: "CVE-2024-27829",
      },
      {
         cve: "CVE-2024-27834",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         notes: [
            {
               category: "other",
               text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
               title: "CWE-119",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27834",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27834.json",
            },
         ],
         title: "CVE-2024-27834",
      },
      {
         cve: "CVE-2024-27837",
         cwe: {
            id: "CWE-757",
            name: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
         },
         notes: [
            {
               category: "other",
               text: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')",
               title: "CWE-757",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27837",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27837.json",
            },
         ],
         title: "CVE-2024-27837",
      },
      {
         cve: "CVE-2024-27841",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27841",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27841.json",
            },
         ],
         title: "CVE-2024-27841",
      },
      {
         cve: "CVE-2024-27842",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27842",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27842.json",
            },
         ],
         title: "CVE-2024-27842",
      },
      {
         cve: "CVE-2024-27843",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27843",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27843.json",
            },
         ],
         title: "CVE-2024-27843",
      },
      {
         cve: "CVE-2024-27847",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27847",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27847.json",
            },
         ],
         title: "CVE-2024-27847",
      },
   ],
}

{
   document: {
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         tlp: {
            label: "WHITE",
         },
      },
      lang: "nl",
      notes: [
         {
            category: "legal_disclaimer",
            text: "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.",
         },
         {
            category: "description",
            text: "Apple heeft kwetsbaarheden verholpen in iOS en iPadOS.",
            title: "Feiten",
         },
         {
            category: "description",
            text: "Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- (Remote) code execution (Administrator/Root rechten)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot gevoelige gegevens\n- Toegang tot systeemgegevens\n- Verhoogde gebruikersrechten",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide app te installeren en draaien, of een malafide link te volgen.",
            title: "Interpretaties",
         },
         {
            category: "description",
            text: "Apple heeft updates uitgebracht om de kwetsbaarheden te verhelpen in iOS en iPadOS 17.5",
            title: "Oplossingen",
         },
         {
            category: "general",
            text: "medium",
            title: "Kans",
         },
         {
            category: "general",
            text: "high",
            title: "Schade",
         },
         {
            category: "general",
            text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
            title: "CWE-119",
         },
         {
            category: "general",
            text: "Exposure of Sensitive Information to an Unauthorized Actor",
            title: "CWE-200",
         },
         {
            category: "general",
            text: "Improper Access Control",
            title: "CWE-284",
         },
      ],
      publisher: {
         category: "coordinator",
         contact_details: "cert@ncsc.nl",
         name: "Nationaal Cyber Security Centrum",
         namespace: "https://www.ncsc.nl/",
      },
      references: [
         {
            category: "external",
            summary: "Source - apple",
            url: "https://support.apple.com/en-us/HT214101",
         },
      ],
      title: "Kwetsbaarheden verholpen in Apple iOS en iPadOS",
      tracking: {
         current_release_date: "2024-05-15T12:47:39.940581Z",
         id: "NCSC-2024-0219",
         initial_release_date: "2024-05-15T12:47:39.940581Z",
         revision_history: [
            {
               date: "2024-05-15T12:47:39.940581Z",
               number: "0",
               summary: "Initiele versie",
            },
         ],
         status: "final",
         version: "1.0.0",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  category: "product_name",
                  name: "ios_and_ipados",
                  product: {
                     name: "ios_and_ipados",
                     product_id: "CSAFPID-551327",
                     product_identification_helper: {
                        cpe: "cpe:2.3:a:apple:ios_and_ipados:*:*:*:*:*:*:*:*",
                     },
                  },
               },
            ],
            category: "vendor",
            name: "apple",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2024-27804",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27804",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27804.json",
            },
         ],
         title: "CVE-2024-27804",
      },
      {
         cve: "CVE-2024-27816",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27816",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27816.json",
            },
         ],
         title: "CVE-2024-27816",
      },
      {
         cve: "CVE-2024-27841",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27841",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27841.json",
            },
         ],
         title: "CVE-2024-27841",
      },
      {
         cve: "CVE-2024-27839",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27839",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27839.json",
            },
         ],
         title: "CVE-2024-27839",
      },
      {
         cve: "CVE-2024-27818",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27818",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27818.json",
            },
         ],
         title: "CVE-2024-27818",
      },
      {
         cve: "CVE-2023-42893",
         references: [
            {
               category: "self",
               summary: "CVE-2023-42893",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42893.json",
            },
         ],
         title: "CVE-2023-42893",
      },
      {
         cve: "CVE-2024-27810",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27810",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27810.json",
            },
         ],
         title: "CVE-2024-27810",
      },
      {
         cve: "CVE-2024-27852",
         cwe: {
            id: "CWE-200",
            name: "Exposure of Sensitive Information to an Unauthorized Actor",
         },
         notes: [
            {
               category: "other",
               text: "Exposure of Sensitive Information to an Unauthorized Actor",
               title: "CWE-200",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27852",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27852.json",
            },
         ],
         title: "CVE-2024-27852",
      },
      {
         cve: "CVE-2024-27835",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27835",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27835.json",
            },
         ],
         title: "CVE-2024-27835",
      },
      {
         cve: "CVE-2024-27803",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27803",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27803.json",
            },
         ],
         title: "CVE-2024-27803",
      },
      {
         cve: "CVE-2024-27821",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27821",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27821.json",
            },
         ],
         title: "CVE-2024-27821",
      },
      {
         cve: "CVE-2024-27847",
         cwe: {
            id: "CWE-284",
            name: "Improper Access Control",
         },
         notes: [
            {
               category: "other",
               text: "Improper Access Control",
               title: "CWE-284",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27847",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27847.json",
            },
         ],
         title: "CVE-2024-27847",
      },
      {
         cve: "CVE-2024-27796",
         references: [
            {
               category: "self",
               summary: "CVE-2024-27796",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27796.json",
            },
         ],
         title: "CVE-2024-27796",
      },
      {
         cve: "CVE-2024-27834",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         notes: [
            {
               category: "other",
               text: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
               title: "CWE-119",
            },
         ],
         references: [
            {
               category: "self",
               summary: "CVE-2024-27834",
               url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-27834.json",
            },
         ],
         title: "CVE-2024-27834",
      },
   ],
}

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-32435)\n\n* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2023-32439)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2023:4201",
            url: "https://access.redhat.com/errata/RHSA-2023:4201",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#important",
            url: "https://access.redhat.com/security/updates/classification/#important",
         },
         {
            category: "external",
            summary: "2218626",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2218626",
         },
         {
            category: "external",
            summary: "2218640",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2218640",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4201.json",
         },
      ],
      title: "Red Hat Security Advisory: webkit2gtk3 security update",
      tracking: {
         current_release_date: "2025-03-20T09:44:42+00:00",
         generator: {
            date: "2025-03-20T09:44:42+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.4.1",
            },
         },
         id: "RHSA-2023:4201",
         initial_release_date: "2023-07-18T15:43:59+00:00",
         revision_history: [
            {
               date: "2023-07-18T15:43:59+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2023-07-18T15:43:59+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2025-03-20T09:44:42+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux AppStream (v. 9)",
                        product: {
                           name: "Red Hat Enterprise Linux AppStream (v. 9)",
                           product_id: "AppStream-9.2.0.Z.MAIN.EUS",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:enterprise_linux:9::appstream",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                        product: {
                           name: "webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                           product_id: "webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9_2.3?arch=src",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                        product: {
                           name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                           product_id: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9_2.3?arch=aarch64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                        product: {
                           name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                           product_id: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9_2.3?arch=ppc64le",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                        product: {
                           name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                           product_id: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9_2.3?arch=i686",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                        product: {
                           name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                           product_id: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9_2.3?arch=x86_64",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                        product: {
                           name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                           product_id: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9_2.3?arch=s390x",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-0:2.38.5-1.el9_2.3.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
            },
            product_reference: "webkit2gtk3-0:2.38.5-1.el9_2.3.src",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
            },
            product_reference: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
            },
            product_reference: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
            },
            product_reference: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
            },
            product_reference: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            },
            product_reference: "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            relates_to_product_reference: "AppStream-9.2.0.Z.MAIN.EUS",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2022-32885",
         cwe: {
            id: "CWE-20",
            name: "Improper Input Validation",
         },
         discovery_date: "2023-09-01T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2236842",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in WebKitGTK. This security issue occurs when processing maliciously crafted web content that may lead to arbitrary code execution. This memory corruption issue was addressed with improved validation.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: Memory corruption issue when processing web content",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This flaw is being rated as 'Moderate' as WebKitGTK package is shipped as a dependency for Gnome package, additionally Red Hat Enterprise Linux doesn't ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2022-32885",
            },
            {
               category: "external",
               summary: "RHBZ#2236842",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2236842",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2022-32885",
               url: "https://www.cve.org/CVERecord?id=CVE-2022-32885",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2022-32885",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2022-32885",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2023-0003.html",
               url: "https://webkitgtk.org/security/WSA-2023-0003.html",
            },
         ],
         release_date: "2023-04-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "webkitgtk: Memory corruption issue when processing web content",
      },
      {
         cve: "CVE-2023-28198",
         cwe: {
            id: "CWE-416",
            name: "Use After Free",
         },
         discovery_date: "2023-09-14T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2238943",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in WebKit. When processing web content, it may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: use after free vulnerability",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This flaw is being rated as 'Moderate' as the WebKitGTK package is shipped as a dependency for the Gnome package. Additionally, Red Hat Enterprise Linux doesn't ship any WebKitGTK based web browser where this flaw would present a higher severity major threat.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-28198",
            },
            {
               category: "external",
               summary: "RHBZ#2238943",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2238943",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-28198",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-28198",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-28198",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-28198",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2023-0008.html",
               url: "https://webkitgtk.org/security/WSA-2023-0008.html",
            },
         ],
         release_date: "2023-09-06T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "webkitgtk: use after free vulnerability",
      },
      {
         cve: "CVE-2023-32435",
         cwe: {
            id: "CWE-94",
            name: "Improper Control of Generation of Code ('Code Injection')",
         },
         discovery_date: "2023-06-29T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2218626",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: memory corruption issue leading to arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-32435",
            },
            {
               category: "external",
               summary: "RHBZ#2218626",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2218626",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-32435",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-32435",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-32435",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-32435",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2023-0005.html",
               url: "https://webkitgtk.org/security/WSA-2023-0005.html",
            },
            {
               category: "external",
               summary: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
               url: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
         ],
         release_date: "2023-06-29T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "This vulnerability can be mitigated by setting the environment variable JSC_useWebAssembly=0, which will disable support for WebAssembly. It's not necessary to set this environment variable if you're already using JavaScriptCoreUseJIT=0 to mitigate other CVEs because WebAssembly depends on JIT.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "exploit_status",
               date: "2023-06-23T00:00:00+00:00",
               details: "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkitgtk: memory corruption issue leading to arbitrary code execution",
      },
      {
         cve: "CVE-2023-32439",
         cwe: {
            id: "CWE-94",
            name: "Improper Control of Generation of Code ('Code Injection')",
         },
         discovery_date: "2023-06-29T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2218640",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in webkitgtk. This issue occurs when processing maliciously crafted web content, which may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: type confusion issue leading to arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-32439",
            },
            {
               category: "external",
               summary: "RHBZ#2218640",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2218640",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-32439",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-32439",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-32439",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-32439",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2023-0005.html",
               url: "https://webkitgtk.org/security/WSA-2023-0005.html",
            },
            {
               category: "external",
               summary: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
               url: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
         ],
         release_date: "2023-06-29T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "This vulnerability can be mitigated by setting the environment variable JSC_useDFGJIT=0, which will disable the data flow graph JIT tier. It's not necessary to set this environment variable if you're already using JavaScriptCoreUseJIT=0 to mitigate other CVEs.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "exploit_status",
               date: "2023-06-23T00:00:00+00:00",
               details: "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkitgtk: type confusion issue leading to arbitrary code execution",
      },
      {
         cve: "CVE-2023-35074",
         discovery_date: "2023-09-28T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2241403",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: processing web content may lead to arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "The webkitgtk versions as shipped with Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability. This flaw relies on webkitgtk's JIT to be enabled while this feature was previously disabled in Red Hat Enterprise Linux 8 and 9 by the following erratas:\n\nRed Hat Enterprise Linux 8: https://access.redhat.com/errata/RHSA-2023:4202\nRed Hat Enterprise Linux 9: https://access.redhat.com/errata/RHSA-2023:4201",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-35074",
            },
            {
               category: "external",
               summary: "RHBZ#2241403",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2241403",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-35074",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-35074",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-35074",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-35074",
            },
         ],
         release_date: "2023-09-28T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "webkitgtk: processing web content may lead to arbitrary code execution",
      },
      {
         cve: "CVE-2023-37450",
         cwe: {
            id: "CWE-94",
            name: "Improper Control of Generation of Code ('Code Injection')",
         },
         discovery_date: "2023-07-13T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2223000",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-37450",
            },
            {
               category: "external",
               summary: "RHBZ#2223000",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2223000",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-37450",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-37450",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-37450",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-37450",
            },
            {
               category: "external",
               summary: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
               url: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
         ],
         release_date: "2023-07-13T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "This vulnerability can be mitigated by setting the environment variable JSC_useWebAssembly=0, which will disable support for WebAssembly. It's not necessary to set this environment variable if you're already using JavaScriptCoreUseJIT=0 to mitigate other CVEs because WebAssembly depends on JIT.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "exploit_status",
               date: "2023-07-13T00:00:00+00:00",
               details: "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkitgtk: arbitrary code execution",
      },
      {
         cve: "CVE-2023-38594",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         discovery_date: "2023-08-10T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2231018",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-38594",
            },
            {
               category: "external",
               summary: "RHBZ#2231018",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2231018",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-38594",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-38594",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-38594",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-38594",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2023-0007.html",
               url: "https://webkitgtk.org/security/WSA-2023-0007.html",
            },
         ],
         release_date: "2023-08-02T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkitgtk: arbitrary code execution",
      },
      {
         cve: "CVE-2023-38595",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         discovery_date: "2023-08-10T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2231019",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-38595",
            },
            {
               category: "external",
               summary: "RHBZ#2231019",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2231019",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-38595",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-38595",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-38595",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-38595",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2023-0007.html",
               url: "https://webkitgtk.org/security/WSA-2023-0007.html",
            },
         ],
         release_date: "2023-08-02T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkitgtk: arbitrary code execution",
      },
      {
         cve: "CVE-2023-41074",
         discovery_date: "2023-09-28T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2241412",
            },
         ],
         notes: [
            {
               category: "description",
               text: "The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: processing web content may lead to arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "The webkitgtk versions as shipped with Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability. This flaw relies on webkitgtk's JIT to be enabled while this feature was previously disabled in Red Hat Enterprise Linux 8 and 9 by the following erratas:\n\nRed Hat Enterprise Linux 8: https://access.redhat.com/errata/RHSA-2023:4202\nRed Hat Enterprise Linux 9: https://access.redhat.com/errata/RHSA-2023:4201",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-41074",
            },
            {
               category: "external",
               summary: "RHBZ#2241412",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2241412",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-41074",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-41074",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-41074",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-41074",
            },
         ],
         release_date: "2023-09-28T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "webkitgtk: processing web content may lead to arbitrary code execution",
      },
      {
         cve: "CVE-2023-41993",
         discovery_date: "2023-09-25T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2240522",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: processing malicious web content may lead to arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This issue doesn't affect the versions of webkitgtk as shipped with Red Hat Enterprise Linux 8 and 9 as the flaw relies on JIT engine. JIT was disabled in the past when the fixes for CVE-2023-32435 and CVE-2023-32439 were released.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-41993",
            },
            {
               category: "external",
               summary: "RHBZ#2240522",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2240522",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-41993",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-41993",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-41993",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-41993",
            },
            {
               category: "external",
               summary: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
               url: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
         ],
         release_date: "2023-09-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "exploit_status",
               date: "2023-09-25T00:00:00+00:00",
               details: "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "webkitgtk: processing malicious web content may lead to arbitrary code execution",
      },
      {
         cve: "CVE-2023-42916",
         cwe: {
            id: "CWE-125",
            name: "Out-of-bounds Read",
         },
         discovery_date: "2023-12-05T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2253054",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in WebKitGTK. Processing malicious web content may cause an out-of-bounds read due to an improper input validation, resulting in sensitive content leaking.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: Out-of-bounds read leads to sensitive data leak",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "The WebKitGTK package versions, as shipped with Red Hat Enterprise 8 and 9, are not affected by this vulnerability. This flaw is related to the JIT code, which is currently disabled by default on both Red Hat Enterprise Linux versions.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-42916",
            },
            {
               category: "external",
               summary: "RHBZ#2253054",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2253054",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-42916",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-42916",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-42916",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-42916",
            },
            {
               category: "external",
               summary: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
               url: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
         ],
         release_date: "2023-12-01T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 6.8,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "exploit_status",
               date: "2023-12-04T00:00:00+00:00",
               details: "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "webkitgtk: Out-of-bounds read leads to sensitive data leak",
      },
      {
         cve: "CVE-2024-23222",
         cwe: {
            id: "CWE-843",
            name: "Access of Resource Using Incompatible Type ('Type Confusion')",
         },
         discovery_date: "2024-01-23T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2259893",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution due to a type confusion issue. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: type confusion may lead to arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This flaw depends on the WebKitGTK JIT engine to be enabled. This feature has been disabled in Red Hat Enterprise Linux 8.8 and 9.2 by the errata RHSA-2023:4202 and RHSA-2023:4201. Therefore, Red Hat Enterprise Linux 8.8 and 9.2, when these errata are applied, and newer versions are not affected by this vulnerability.\n\nRHSA-2023:4202: https://access.redhat.com/errata/RHSA-2023:4202\nRHSA-2023:4201: https://access.redhat.com/errata/RHSA-2023:4201\n\nTo exploit this flaw, an attacker needs to trick a user into processing or loading malicious web content. For this reason, this flaw was rated with an important, and not critical, severity.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2024-23222",
            },
            {
               category: "external",
               summary: "RHBZ#2259893",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2259893",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2024-23222",
               url: "https://www.cve.org/CVERecord?id=CVE-2024-23222",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-23222",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2024-23222",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2024-0001.html",
               url: "https://webkitgtk.org/security/WSA-2024-0001.html",
            },
            {
               category: "external",
               summary: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
               url: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
         ],
         release_date: "2024-01-23T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "Do not process or load untrusted web content. Please update the affected package as soon as possible.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "exploit_status",
               date: "2024-01-23T00:00:00+00:00",
               details: "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
            },
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkitgtk: type confusion may lead to arbitrary code execution",
      },
      {
         cve: "CVE-2024-23252",
         discovery_date: "2024-03-19T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2270288",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in WebKit. This flaw allows an attacker to trigger a denial of service condition by convincing a victim to visit a specially crafted website.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkit: processing malicious web content may lead to denial-of-service",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2024-23252",
            },
            {
               category: "external",
               summary: "RHBZ#2270288",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2270288",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2024-23252",
               url: "https://www.cve.org/CVERecord?id=CVE-2024-23252",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-23252",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2024-23252",
            },
            {
               category: "external",
               summary: "https://seclists.org/fulldisclosure/2024/Mar/21",
               url: "https://seclists.org/fulldisclosure/2024/Mar/21",
            },
         ],
         release_date: "2024-03-07T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Moderate",
            },
         ],
         title: "webkit: processing malicious web content may lead to denial-of-service",
      },
      {
         cve: "CVE-2024-27808",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         discovery_date: "2024-09-25T15:36:18.356000+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2314697",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient memory handling, which attackers could exploit to execute malicious code on affected systems.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: Processing web content may lead to arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users' systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2024-27808",
            },
            {
               category: "external",
               summary: "RHBZ#2314697",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2314697",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2024-27808",
               url: "https://www.cve.org/CVERecord?id=CVE-2024-27808",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-27808",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2024-27808",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2024-0005.html",
               url: "https://webkitgtk.org/security/WSA-2024-0005.html",
            },
         ],
         release_date: "2024-09-25T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkitgtk: Processing web content may lead to arbitrary code execution",
      },
      {
         cve: "CVE-2024-27833",
         cwe: {
            id: "CWE-119",
            name: "Improper Restriction of Operations within the Bounds of a Memory Buffer",
         },
         discovery_date: "2024-09-25T15:40:34.042000+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2314700",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in WebKit. This flaw allows a remote attacker to perform arbitrary code execution when processing web content. This flaw is caused by insufficient input validation, which attackers could exploit to execute malicious code on affected systems.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This WebKit vulnerability marked as important because it enables remote attackers to execute malicious code on users' systems just by visiting compromised websites, posing significant risks like data theft and system compromise.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2024-27833",
            },
            {
               category: "external",
               summary: "RHBZ#2314700",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2314700",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2024-27833",
               url: "https://www.cve.org/CVERecord?id=CVE-2024-27833",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-27833",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2024-27833",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2024-0005.html",
               url: "https://webkitgtk.org/security/WSA-2024-0005.html",
            },
         ],
         release_date: "2024-09-25T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "Do not process or load untrusted web content with WebKitGTK.\n\nIn Red Hat Enterprise Linux 7, the following packages require WebKitGTK4: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.\n\nThis vulnerability can only be exploited when these packages are installed in the system and being used via a graphical interface to process untrusted web content, via GNOME for example. In gnome-shell, the vulnerability can be exploited by an attacker from the local network without user interaction.\n\nTo mitigate this vulnerability, consider removing these packages. Note that some of these packages are required by GNOME, removing them will also remove GNOME and other packages, breaking functionality. However, the server can still be used via the terminal interface.\n\nAdditionally, WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution",
      },
      {
         cve: "CVE-2024-27834",
         cwe: {
            id: "CWE-288",
            name: "Authentication Bypass Using an Alternate Path or Channel",
         },
         discovery_date: "2024-05-22T00:00:00+00:00",
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2282412",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in Webkit. This flaw allows an attacker with arbitrary read and write capability to bypass pointer authentication.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "webkit: pointer authentication bypass",
               title: "Vulnerability summary",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
               "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2024-27834",
            },
            {
               category: "external",
               summary: "RHBZ#2282412",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2282412",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2024-27834",
               url: "https://www.cve.org/CVERecord?id=CVE-2024-27834",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-27834",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2024-27834",
            },
            {
               category: "external",
               summary: "https://webkitgtk.org/security/WSA-2024-0003.html",
               url: "https://webkitgtk.org/security/WSA-2024-0003.html",
            },
         ],
         release_date: "2024-05-21T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2023-07-18T15:43:59+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2023:4201",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.src",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-debugsource-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-0:2.38.5-1.el9_2.3.x86_64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.aarch64",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.i686",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.ppc64le",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.s390x",
                  "AppStream-9.2.0.Z.MAIN.EUS:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9_2.3.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Important",
            },
         ],
         title: "webkit: pointer authentication bypass",
      },
   ],
}