RHSA-2023:2256
Vulnerability from csaf_redhat - Published: 2023-05-09 09:52 - Updated: 2026-01-13 22:05Summary
Red Hat Security Advisory: webkit2gtk3 security and bug fix update
Severity
Important
Notes
Topic: An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.
Security Fix(es):
* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)
* webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)
* webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)
* webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)
* webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)
* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)
* webkitgtk: sensitive information disclosure issue (CVE-2022-42824)
* webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)
* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)
* webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)
* webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)
* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)
* webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A vulnerability was found in webkitgtkm, where a buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in webkitgtk, where an out-of-bounds read was addressed with improved bounds checking. Processing maliciously crafted web content may lead to arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in webkitgtk. Processing maliciously crafted web content may disclose the internal states of the app.
6.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in webkitgtk, where an issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing.
6.1 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in webkitgtk, where a logic issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in webkitgtk, where a type confusion issue was addressed with improved memory handling. By this security flaw processing maliciously crafted web content may lead to arbitrary code execution.
5.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in WebKitGTK. This issue exists due to a use-after-free error when processing maliciously crafted web content in WebKit. This may allow an attacker to trick the victim to visit a specially crafted website, causing an application to halt, crash, or perform arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.
6.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks.
5.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows an attacker to process maliciously crafted web content that may disclose sensitive user information.
6.5 (Medium)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Exploit Status
CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Impact
Important
A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. This may allow a remote attacker to create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.
8.8 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.
7.5 (High)
Affected products
Fixed
46 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
References
129 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.\n\nSecurity Fix(es):\n\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23517)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2023-23518)\n\n* webkitgtk: buffer overflow issue was addressed with improved memory handling (CVE-2022-32886)\n\n* webkitgtk: out-of-bounds write issue was addressed with improved bounds checking (CVE-2022-32888)\n\n* webkitgtk: correctness issue in the JIT was addressed with improved checks (CVE-2022-32923)\n\n* webkitgtk: issue was addressed with improved UI handling (CVE-2022-42799)\n\n* webkitgtk: type confusion issue leading to arbitrary code execution (CVE-2022-42823)\n\n* webkitgtk: sensitive information disclosure issue (CVE-2022-42824)\n\n* webkitgtk: memory disclosure issue was addressed with improved memory handling (CVE-2022-42852)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-42863)\n\n* webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42867)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46691)\n\n* webkitgtk: Same Origin Policy bypass issue (CVE-2022-46692)\n\n* webkitgtk: logic issue leading to user information disclosure (CVE-2022-46698)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46699)\n\n* webkitgtk: memory corruption issue leading to arbitrary code execution (CVE-2022-46700)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild() (CVE-2023-25358)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer() (CVE-2023-25360)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling() (CVE-2023-25361)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (CVE-2023-25362)\n\n* webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags() (CVE-2023-25363)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.2 Release Notes linked from the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2023:2256",
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index"
},
{
"category": "external",
"summary": "2127467",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2127467"
},
{
"category": "external",
"summary": "2128643",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128643"
},
{
"category": "external",
"summary": "2140501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140501"
},
{
"category": "external",
"summary": "2140502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140502"
},
{
"category": "external",
"summary": "2140503",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140503"
},
{
"category": "external",
"summary": "2140504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140504"
},
{
"category": "external",
"summary": "2140505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140505"
},
{
"category": "external",
"summary": "2156986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156986"
},
{
"category": "external",
"summary": "2156987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156987"
},
{
"category": "external",
"summary": "2156989",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156989"
},
{
"category": "external",
"summary": "2156990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156990"
},
{
"category": "external",
"summary": "2156991",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156991"
},
{
"category": "external",
"summary": "2156992",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156992"
},
{
"category": "external",
"summary": "2156993",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156993"
},
{
"category": "external",
"summary": "2156994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156994"
},
{
"category": "external",
"summary": "2167715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167715"
},
{
"category": "external",
"summary": "2167716",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167716"
},
{
"category": "external",
"summary": "2167717",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167717"
},
{
"category": "external",
"summary": "2175099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175099"
},
{
"category": "external",
"summary": "2175101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175101"
},
{
"category": "external",
"summary": "2175103",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175103"
},
{
"category": "external",
"summary": "2175105",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175105"
},
{
"category": "external",
"summary": "2175107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175107"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2256.json"
}
],
"title": "Red Hat Security Advisory: webkit2gtk3 security and bug fix update",
"tracking": {
"current_release_date": "2026-01-13T22:05:49+00:00",
"generator": {
"date": "2026-01-13T22:05:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.15"
}
},
"id": "RHSA-2023:2256",
"initial_release_date": "2023-05-09T09:52:48+00:00",
"revision_history": [
{
"date": "2023-05-09T09:52:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2023-05-09T09:52:48+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-01-13T22:05:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.38.5-1.el9.src",
"product": {
"name": "webkit2gtk3-0:2.38.5-1.el9.src",
"product_id": "webkit2gtk3-0:2.38.5-1.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=i686"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "webkit2gtk3-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3@2.38.5-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel@2.38.5-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc@2.38.5-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel@2.38.5-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debugsource@2.38.5-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-debuginfo@2.38.5-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-devel-debuginfo@2.38.5-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-debuginfo@2.38.5-1.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"product": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"product_id": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/webkit2gtk3-jsc-devel-debuginfo@2.38.5-1.el9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.38.5-1.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src"
},
"product_reference": "webkit2gtk3-0:2.38.5-1.el9.src",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"relates_to_product_reference": "AppStream-9.2.0.GA"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
},
"product_reference": "webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.GA"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-32886",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2022-09-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2128643"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in webkitgtkm, where a buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: buffer overflow issue was addressed with improved memory handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-32886"
},
{
"category": "external",
"summary": "RHBZ#2128643",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2128643"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-32886",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32886"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0009.html",
"url": "https://webkitgtk.org/security/WSA-2022-0009.html"
}
],
"release_date": "2022-09-12T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: buffer overflow issue was addressed with improved memory handling"
},
{
"cve": "CVE-2022-32888",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2022-11-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2140501"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in webkitgtk, where an out-of-bounds read was addressed with improved bounds checking. Processing maliciously crafted web content may lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: out-of-bounds write issue was addressed with improved bounds checking",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-32888"
},
{
"category": "external",
"summary": "RHBZ#2140501",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140501"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-32888",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32888"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
"url": "https://webkitgtk.org/security/WSA-2022-0010.html"
}
],
"release_date": "2022-10-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: out-of-bounds write issue was addressed with improved bounds checking"
},
{
"cve": "CVE-2022-32923",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2022-11-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2140502"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in webkitgtk. Processing maliciously crafted web content may disclose the internal states of the app.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: correctness issue in the JIT was addressed with improved checks",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-32923"
},
{
"category": "external",
"summary": "RHBZ#2140502",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140502"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-32923",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-32923"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-32923",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-32923"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
"url": "https://webkitgtk.org/security/WSA-2022-0010.html"
}
],
"release_date": "2022-10-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: correctness issue in the JIT was addressed with improved checks"
},
{
"cve": "CVE-2022-42799",
"cwe": {
"id": "CWE-1021",
"name": "Improper Restriction of Rendered UI Layers or Frames"
},
"discovery_date": "2022-11-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2140503"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in webkitgtk, where an issue was addressed with improved UI handling. Visiting a website that frames malicious content may lead to UI spoofing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: issue was addressed with improved UI handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-42799"
},
{
"category": "external",
"summary": "RHBZ#2140503",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140503"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-42799",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42799"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42799",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42799"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
"url": "https://webkitgtk.org/security/WSA-2022-0010.html"
}
],
"release_date": "2022-10-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: issue was addressed with improved UI handling"
},
{
"cve": "CVE-2022-42823",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"discovery_date": "2022-11-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2140505"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in webkitgtk, where a logic issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: type confusion issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-42823"
},
{
"category": "external",
"summary": "RHBZ#2140505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-42823",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42823"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
"url": "https://webkitgtk.org/security/WSA-2022-0010.html"
}
],
"release_date": "2022-10-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: type confusion issue leading to arbitrary code execution"
},
{
"cve": "CVE-2022-42824",
"discovery_date": "2022-11-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2140504"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in webkitgtk, where a type confusion issue was addressed with improved memory handling. By this security flaw processing maliciously crafted web content may lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: sensitive information disclosure issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-42824"
},
{
"category": "external",
"summary": "RHBZ#2140504",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2140504"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-42824",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42824"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42824",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42824"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0010.html",
"url": "https://webkitgtk.org/security/WSA-2022-0010.html"
}
],
"release_date": "2022-10-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: sensitive information disclosure issue"
},
{
"cve": "CVE-2022-42826",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-02-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2167716"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK. This issue exists due to a use-after-free error when processing maliciously crafted web content in WebKit. This may allow an attacker to trick the victim to visit a specially crafted website, causing an application to halt, crash, or perform arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: use-after-free issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-42826"
},
{
"category": "external",
"summary": "RHBZ#2167716",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167716"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-42826",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42826"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
"url": "https://webkitgtk.org/security/WSA-2023-0001.html"
}
],
"release_date": "2023-02-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: use-after-free issue leading to arbitrary code execution"
},
{
"cve": "CVE-2022-42852",
"discovery_date": "2022-12-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2156986"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: memory disclosure issue was addressed with improved memory handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-42852"
},
{
"category": "external",
"summary": "RHBZ#2156986",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156986"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-42852",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42852"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
"url": "https://webkitgtk.org/security/WSA-2022-0011.html"
}
],
"release_date": "2022-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: memory disclosure issue was addressed with improved memory handling"
},
{
"cve": "CVE-2022-42863",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2022-12-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2156987"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-42863"
},
{
"category": "external",
"summary": "RHBZ#2156987",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156987"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-42863",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42863"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42863",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42863"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
"url": "https://webkitgtk.org/security/WSA-2022-0011.html"
}
],
"release_date": "2022-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
},
{
"cve": "CVE-2022-42867",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2022-12-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2156989"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: use-after-free issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-42867"
},
{
"category": "external",
"summary": "RHBZ#2156989",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156989"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-42867",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42867"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-42867",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42867"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
"url": "https://webkitgtk.org/security/WSA-2022-0011.html"
}
],
"release_date": "2022-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: use-after-free issue leading to arbitrary code execution"
},
{
"cve": "CVE-2022-46691",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2022-12-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2156990"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-46691"
},
{
"category": "external",
"summary": "RHBZ#2156990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-46691",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46691"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
"url": "https://webkitgtk.org/security/WSA-2022-0011.html"
}
],
"release_date": "2022-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
},
{
"cve": "CVE-2022-46692",
"discovery_date": "2022-12-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2156991"
}
],
"notes": [
{
"category": "description",
"text": "A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: Same Origin Policy bypass issue",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-46692"
},
{
"category": "external",
"summary": "RHBZ#2156991",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156991"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-46692",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46692"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46692",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46692"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
"url": "https://webkitgtk.org/security/WSA-2022-0011.html"
}
],
"release_date": "2022-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: Same Origin Policy bypass issue"
},
{
"cve": "CVE-2022-46698",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2022-12-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2156992"
}
],
"notes": [
{
"category": "description",
"text": "A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows an attacker to process maliciously crafted web content that may disclose sensitive user information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: logic issue leading to user information disclosure",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-46698"
},
{
"category": "external",
"summary": "RHBZ#2156992",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156992"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-46698",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46698"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46698",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46698"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
"url": "https://webkitgtk.org/security/WSA-2022-0011.html"
}
],
"release_date": "2022-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: logic issue leading to user information disclosure"
},
{
"cve": "CVE-2022-46699",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2022-12-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2156993"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-46699"
},
{
"category": "external",
"summary": "RHBZ#2156993",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156993"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-46699",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46699"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46699",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46699"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
"url": "https://webkitgtk.org/security/WSA-2022-0011.html"
}
],
"release_date": "2022-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
},
{
"cve": "CVE-2022-46700",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2022-12-30T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2156994"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in webkitgtk. Improper input validation leads to a memory corruption vulnerability. This flaw allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or perform arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-46700"
},
{
"category": "external",
"summary": "RHBZ#2156994",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2156994"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-46700",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-46700"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-46700",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-46700"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2022-0011.html",
"url": "https://webkitgtk.org/security/WSA-2022-0011.html"
}
],
"release_date": "2022-12-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
},
{
"cve": "CVE-2022-48503",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2023-06-29T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2218623"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in webkitgtk. This issue occurs when processing web content, which may lead to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: improper bounds checking leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "WebKitGTK3 is not required by any package. Therefore, it can be removed without consequences or break of functionality..\n\nWebKitGTK4 is used in Red Hat Enterprise Linux 7 by the following packages: evolution-data-server, glade, gnome-boxes, gnome-initial-setup, gnome-online-accounts, gnome-shell, shotwell, sushi and yelp.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2022-48503"
},
{
"category": "external",
"summary": "RHBZ#2218623",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2218623"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2022-48503",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-48503"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-48503",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48503"
},
{
"category": "external",
"summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
}
],
"release_date": "2023-06-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, consider removing certain GNOME packages. Note that uninstalling these packages will break functionality in GNOME, however the server can still be used via the terminal interface.",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "exploit_status",
"date": "2025-10-20T00:00:00+00:00",
"details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
},
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: improper bounds checking leading to arbitrary code execution"
},
{
"cve": "CVE-2023-23517",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2023-02-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2167717"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. This may allow a remote attacker to create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-23517"
},
{
"category": "external",
"summary": "RHBZ#2167717",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167717"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-23517",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23517"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-23517",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23517"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
"url": "https://webkitgtk.org/security/WSA-2023-0001.html"
}
],
"release_date": "2023-02-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
},
{
"cve": "CVE-2023-23518",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2023-02-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2167715"
}
],
"notes": [
{
"category": "description",
"text": "A vulnerability was found in WebKitGTK. This issue occurs when processing maliciously crafted web content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption, and execute arbitrary code on the target system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: memory corruption issue leading to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-23518"
},
{
"category": "external",
"summary": "RHBZ#2167715",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2167715"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-23518",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-23518"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-23518",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23518"
},
{
"category": "external",
"summary": "https://webkitgtk.org/security/WSA-2023-0001.html",
"url": "https://webkitgtk.org/security/WSA-2023-0001.html"
}
],
"release_date": "2023-02-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "webkitgtk: memory corruption issue leading to arbitrary code execution"
},
{
"cve": "CVE-2023-25358",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2175099"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-25358"
},
{
"category": "external",
"summary": "RHBZ#2175099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-25358",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25358"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25358",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25358"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=242683",
"url": "https://bugs.webkit.org/show_bug.cgi?id=242683"
}
],
"release_date": "2022-07-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()"
},
{
"cve": "CVE-2023-25360",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2175101"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-25360"
},
{
"category": "external",
"summary": "RHBZ#2175101",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175101"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-25360",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25360"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25360",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25360"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=242686",
"url": "https://bugs.webkit.org/show_bug.cgi?id=242686"
}
],
"release_date": "2022-07-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::renderer()"
},
{
"cve": "CVE-2023-25361",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2175103"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-25361"
},
{
"category": "external",
"summary": "RHBZ#2175103",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175103"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-25361",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25361"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25361",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25361"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=244249",
"url": "https://bugs.webkit.org/show_bug.cgi?id=244249"
}
],
"release_date": "2022-07-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()"
},
{
"cve": "CVE-2023-25362",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2175105"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-25362"
},
{
"category": "external",
"summary": "RHBZ#2175105",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175105"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-25362",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25362"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25362",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25362"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=244802",
"url": "https://bugs.webkit.org/show_bug.cgi?id=244802"
}
],
"release_date": "2022-07-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()"
},
{
"cve": "CVE-2023-25363",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2175107"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allows attackers to execute code remotely.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags()",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-25363"
},
{
"category": "external",
"summary": "RHBZ#2175107",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175107"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-25363",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-25363"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25363",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25363"
},
{
"category": "external",
"summary": "https://bugs.webkit.org/show_bug.cgi?id=242684",
"url": "https://bugs.webkit.org/show_bug.cgi?id=242684"
}
],
"release_date": "2022-07-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2023-05-09T09:52:48+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2023:2256"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.src",
"AppStream-9.2.0.GA:webkit2gtk3-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-debugsource-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-devel-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-debuginfo-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-0:2.38.5-1.el9.x86_64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.aarch64",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.i686",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.ppc64le",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.s390x",
"AppStream-9.2.0.GA:webkit2gtk3-jsc-devel-debuginfo-0:2.38.5-1.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::updateDescendantDependentFlags()"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…