红帽产品勘误 RHSA-2024:10480 - Security Advisory
发布：
2024-11-27
已更新：
2024-11-27

RHSA-2024:10480 - Security Advisory

概述

Important: webkit2gtk3 security update

类型/严重性

Security Advisory: Important

Red Hat Insights 补丁分析

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

描述

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • webkitgtk: data isolation bypass vulnerability (CVE-2024-44309)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

修复

  • BZ - 2327927 - CVE-2024-44309 webkitgtk: data isolation bypass vulnerability

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
webkit2gtk3-2.46.3-2.el8_2.src.rpm SHA-256: 2e466e1f69a4b0cae97a5438660cbca9329c1be9c30acf7b1c7082a2e13a1521
x86_64
webkit2gtk3-2.46.3-2.el8_2.i686.rpm SHA-256: fe47228661d33eef4e810efffe6d4497d16f4470ea0390782688cf7b3b4cdbba
webkit2gtk3-2.46.3-2.el8_2.x86_64.rpm SHA-256: 2f3e3c4ba1a1eaa76d96a8a589ee3616abe512759709bb4d7596d79838ab4e19
webkit2gtk3-debuginfo-2.46.3-2.el8_2.i686.rpm SHA-256: aaa4cc1c498c4027847e7ad0b1f41f8033ff5b95ab923c53275d05450d4746ee
webkit2gtk3-debuginfo-2.46.3-2.el8_2.x86_64.rpm SHA-256: 26261355675590bbf67ea78ee3dc0e2a4789ceccd8be6eb1bf19c4ff38385a25
webkit2gtk3-debugsource-2.46.3-2.el8_2.i686.rpm SHA-256: b8e8ee6dfd537cdf95079f1585a449f07f4aa2c70885d4ba0da5ec0e18324a4f
webkit2gtk3-debugsource-2.46.3-2.el8_2.x86_64.rpm SHA-256: a3e37885ae8a1a967aacd03a974ef8768a7d7c6627275b635b7fcda791965e2a
webkit2gtk3-devel-2.46.3-2.el8_2.i686.rpm SHA-256: ee12a2b25b5b2fd95b8c1f65a47652401ac2dd49de09d3baeabe91cf580a6a29
webkit2gtk3-devel-2.46.3-2.el8_2.x86_64.rpm SHA-256: 220d51dcb36bf58435f624db2dca51d5caf4443c8912ba2f7b42f1b9b324e9b4
webkit2gtk3-devel-debuginfo-2.46.3-2.el8_2.i686.rpm SHA-256: fca3b7bf8810ab6fa12e5abd3e84dd662b626d522c76006110fe3eb7b2704da5
webkit2gtk3-devel-debuginfo-2.46.3-2.el8_2.x86_64.rpm SHA-256: 327fc9cc11554f6dd1c0548a283b8aabb606fbf8db2425fa76aa59694e837b01
webkit2gtk3-jsc-2.46.3-2.el8_2.i686.rpm SHA-256: 120d7dd007d44c5afde0bb7f4a22df221898546828370fcf0bd6feec5cd8a94f
webkit2gtk3-jsc-2.46.3-2.el8_2.x86_64.rpm SHA-256: 02c6e7413515b99efcd61347677bab9afb5d3d3b88d17756646477b767c63fcd
webkit2gtk3-jsc-debuginfo-2.46.3-2.el8_2.i686.rpm SHA-256: f53c46d8e531a8fd0614c4723e307572eef7da7a65213de78893e970ea88a74c
webkit2gtk3-jsc-debuginfo-2.46.3-2.el8_2.x86_64.rpm SHA-256: 8c798915a859cd7bd05fddf69d2b950ff6265492f31dd5fda092b088a3a08751
webkit2gtk3-jsc-devel-2.46.3-2.el8_2.i686.rpm SHA-256: 1faea1a2b5b49e5db03350b36ec58f364be31b6b2a036e2fa9896b1cb38a1182
webkit2gtk3-jsc-devel-2.46.3-2.el8_2.x86_64.rpm SHA-256: e480e191a72d362ced24a737ed79a591dd4f79bd90ee76aadaf5f83ac5c5ddcd
webkit2gtk3-jsc-devel-debuginfo-2.46.3-2.el8_2.i686.rpm SHA-256: 165b2319d08cc9552d7eb730417b4f17d45fee1bb5533369705c956256773459
webkit2gtk3-jsc-devel-debuginfo-2.46.3-2.el8_2.x86_64.rpm SHA-256: 9f57a08ec1bf869075f3f3498b2dbf286969c518442839edaf98fd10326b2383

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。