Red Hat Product Errata RHSA-2024:10481 - Security Advisory
Issued:
2024-11-27
Updated:
2024-11-27

RHSA-2024:10481 - Security Advisory

Synopsis

Important: webkit2gtk3 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

  • webkitgtk: data isolation bypass vulnerability (CVE-2024-44309)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

  • BZ - 2327927 - CVE-2024-44309 webkitgtk: data isolation bypass vulnerability

Red Hat Enterprise Linux for x86_64 8

SRPM
webkit2gtk3-2.46.3-2.el8_10.src.rpm SHA-256: 521e79307f07cdab0f0e178a889e866556bc3bd0b1743883274c1858170481e6
x86_64
webkit2gtk3-2.46.3-2.el8_10.i686.rpm SHA-256: 42af9ad881e31b8714050e8aaccbfe82c8ab70cb508268551c0b7dd50db14f17
webkit2gtk3-2.46.3-2.el8_10.x86_64.rpm SHA-256: da7f99672f30c29213755ee45d9bdd9352ce86627ba2805ac19a61b8a123202f
webkit2gtk3-debuginfo-2.46.3-2.el8_10.i686.rpm SHA-256: e2aa19acb9de5c4b80b830e375299f0dc5829432b240199400781a8a37f9dd97
webkit2gtk3-debuginfo-2.46.3-2.el8_10.x86_64.rpm SHA-256: c5ecaa7d2bb758165d4cff18c39fba77ea37e40fc1aaab407c5612d28006d602
webkit2gtk3-debugsource-2.46.3-2.el8_10.i686.rpm SHA-256: 953b5bb0eda70b16c2a9ca5bfc42f1b2ef5e3a56a15800b88b570827d79b4ef9
webkit2gtk3-debugsource-2.46.3-2.el8_10.x86_64.rpm SHA-256: 4805d4a44f7d72cca8071669b5d73326379210d6a78b92ab3445a4181e6c3792
webkit2gtk3-devel-2.46.3-2.el8_10.i686.rpm SHA-256: 577b2a442153a575d3b2282cb9796a5cc379de31ea20c8a75e6180b17a055fb4
webkit2gtk3-devel-2.46.3-2.el8_10.x86_64.rpm SHA-256: b81b5f764a1ac66f69836ca0f9e11c9857b8b174a275d42eb4bb715bd80ea31d
webkit2gtk3-devel-debuginfo-2.46.3-2.el8_10.i686.rpm SHA-256: 04df87520221e116480efe5b4e157469cee654849261e26c2473dac42a93f4d0
webkit2gtk3-devel-debuginfo-2.46.3-2.el8_10.x86_64.rpm SHA-256: f8afd08b1cb309da60dfb82e78e88e42e3fb42c50a43b8f6d33010b259e54aed
webkit2gtk3-jsc-2.46.3-2.el8_10.i686.rpm SHA-256: 38b5f3aba8f3b8cdaea21f776da38e685b89bda6a96a90021d26ccde0f0fb7c8
webkit2gtk3-jsc-2.46.3-2.el8_10.x86_64.rpm SHA-256: dd63f707d926667aadd725a723388625ed0dcb62cdd9b4445d16ef6a0bf86361
webkit2gtk3-jsc-debuginfo-2.46.3-2.el8_10.i686.rpm SHA-256: 77e20e1cb9cd914720c44379c814ad5913e3906ef3ff64eb28b9d8feeded601e
webkit2gtk3-jsc-debuginfo-2.46.3-2.el8_10.x86_64.rpm SHA-256: 96c523d72e30df51ce83437dbc0bef3a2757525c7de8fbec04984fb5929f0337
webkit2gtk3-jsc-devel-2.46.3-2.el8_10.i686.rpm SHA-256: cffc05604a43483a3e4ce55c06b18dfe6224dd77463913047bd6fc376e539821
webkit2gtk3-jsc-devel-2.46.3-2.el8_10.x86_64.rpm SHA-256: e7c0b14e36d776c8fb4b8218f82cce833ce4ef8b705c40fa4923108bcd2c8fe3
webkit2gtk3-jsc-devel-debuginfo-2.46.3-2.el8_10.i686.rpm SHA-256: e22ace99b961120af8e9a613b0de1f9d61dc20a2225eb26eae27b6c8131c5264
webkit2gtk3-jsc-devel-debuginfo-2.46.3-2.el8_10.x86_64.rpm SHA-256: e240caee0587a63d846e049c40277d1fa1c316467cd93c10acdb428ba9448114

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
webkit2gtk3-2.46.3-2.el8_10.src.rpm SHA-256: 521e79307f07cdab0f0e178a889e866556bc3bd0b1743883274c1858170481e6
s390x
webkit2gtk3-2.46.3-2.el8_10.s390x.rpm SHA-256: aa13b3f2bb18424642de74ea55707b478fbcd015b597fbc3fcdae59dc4cd76ba
webkit2gtk3-debuginfo-2.46.3-2.el8_10.s390x.rpm SHA-256: d5280cd8ac26791dec65d78d60935a897f42e3479ac0f563396582b82435ab7a
webkit2gtk3-debugsource-2.46.3-2.el8_10.s390x.rpm SHA-256: cecec9b60492e89672398826c49144860b2e848d1670a018dc8721ba2d902905
webkit2gtk3-devel-2.46.3-2.el8_10.s390x.rpm SHA-256: e337ef96d42161a17e39d6d79eb189cd7d3e77f72d17045037175be81c24b0b8
webkit2gtk3-devel-debuginfo-2.46.3-2.el8_10.s390x.rpm SHA-256: 7e386f48467bd2d6aff962c82086c594ab5d4d8874b6bec626925927e2eb42d1
webkit2gtk3-jsc-2.46.3-2.el8_10.s390x.rpm SHA-256: f3b96a064acf1509f05ce795c663ce00cdffd84680519d6455dde029febe12db
webkit2gtk3-jsc-debuginfo-2.46.3-2.el8_10.s390x.rpm SHA-256: 2bbc8dafbe6386d9157bc8f5ce4609c88496cfcb74da307ea616e4ad80bc3aed
webkit2gtk3-jsc-devel-2.46.3-2.el8_10.s390x.rpm SHA-256: 78bbe315ca999cbfa9546dbb4a5f3a6a70fc786d71e6c147b7dccb2680f2174b
webkit2gtk3-jsc-devel-debuginfo-2.46.3-2.el8_10.s390x.rpm SHA-256: 91cc4d0b170231644cf6b286f3b91fb6891147e2af74b4f802899b337f85a8e7

Red Hat Enterprise Linux for Power, little endian 8

SRPM
webkit2gtk3-2.46.3-2.el8_10.src.rpm SHA-256: 521e79307f07cdab0f0e178a889e866556bc3bd0b1743883274c1858170481e6
ppc64le
webkit2gtk3-2.46.3-2.el8_10.ppc64le.rpm SHA-256: fc97d4926ef9483baa95859beb757e89f02bd167686e3375ad7010670dcd7cf8
webkit2gtk3-debuginfo-2.46.3-2.el8_10.ppc64le.rpm SHA-256: 5576590ddcf6ee63f31dbcf90b130edda906762d9f4b9a7f5459885b10a70baa
webkit2gtk3-debugsource-2.46.3-2.el8_10.ppc64le.rpm SHA-256: 363b4e098ca6a29b09f86e752f0ef2bd46a25dfcba7c27684bf0b5a16a1045a9
webkit2gtk3-devel-2.46.3-2.el8_10.ppc64le.rpm SHA-256: bb22b489869cdc06f214bba2ba6292c45022c03f8779d673b8402c04903d36bd
webkit2gtk3-devel-debuginfo-2.46.3-2.el8_10.ppc64le.rpm SHA-256: 7511273025564bedd231365db1e1b41086d6171618a67d83c8c199a5b0dbb56c
webkit2gtk3-jsc-2.46.3-2.el8_10.ppc64le.rpm SHA-256: 8ebca972af8a6c81d060b7d8f2032d27f3f799657c62fcfc41280715da3daf51
webkit2gtk3-jsc-debuginfo-2.46.3-2.el8_10.ppc64le.rpm SHA-256: cab931a7c3607117c59a04b9c8ac550399c14f303d0809a541118b860839b708
webkit2gtk3-jsc-devel-2.46.3-2.el8_10.ppc64le.rpm SHA-256: 201fc08a93f75f83d542670086676eceda14a26173e0195b58beff7a55671d6e
webkit2gtk3-jsc-devel-debuginfo-2.46.3-2.el8_10.ppc64le.rpm SHA-256: 316395610624b8f49bb1568303865f60eaa6ae01b6f2159e5b9da019d48db199

Red Hat Enterprise Linux for ARM 64 8

SRPM
webkit2gtk3-2.46.3-2.el8_10.src.rpm SHA-256: 521e79307f07cdab0f0e178a889e866556bc3bd0b1743883274c1858170481e6
aarch64
webkit2gtk3-2.46.3-2.el8_10.aarch64.rpm SHA-256: 806b40dbadaa7d24b13acf99da56691c65d0574904ac4db4232d1f9b2cca479d
webkit2gtk3-debuginfo-2.46.3-2.el8_10.aarch64.rpm SHA-256: dee2ed12b6645a87e5390972b95aca7849b1c991a6c67af7630de9e148138d0e
webkit2gtk3-debugsource-2.46.3-2.el8_10.aarch64.rpm SHA-256: 245f3d7aab0d08e4fa9b48780de867ccd174d6a21ced67ff6584cbab0dd9d977
webkit2gtk3-devel-2.46.3-2.el8_10.aarch64.rpm SHA-256: 11222f8a6e976a1cc6f457f0772428be431e9c81a455701c2e792ebf31ae6afb
webkit2gtk3-devel-debuginfo-2.46.3-2.el8_10.aarch64.rpm SHA-256: d577d5bda47d2476b44c39fe52703579e3a1ca64001cfb912ef10939de7dcbff
webkit2gtk3-jsc-2.46.3-2.el8_10.aarch64.rpm SHA-256: 989ce888e4f09224ee4ce99964e732c15f3bc961a8229e9f822ac1cdef9b79b8
webkit2gtk3-jsc-debuginfo-2.46.3-2.el8_10.aarch64.rpm SHA-256: e3104bd0f2fefce00116307ae84113d8b78abf2a34b2cfdc3ed3e9ee7ad4fabc
webkit2gtk3-jsc-devel-2.46.3-2.el8_10.aarch64.rpm SHA-256: 18f87d2eda512f2d2a0fd62da3dd87588931c3a1ce4ed2eb4b597c21e6b7bdcb
webkit2gtk3-jsc-devel-debuginfo-2.46.3-2.el8_10.aarch64.rpm SHA-256: d7756298273696d50043ff3a6bfadfd9382c85ae06417c4316568651e7e88d0a

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.