RLSA-2024:9144

Security

Mirrored from RHSA-2024:9144

Issued at: 2026-08-26

Updated at: 2026-08-26

Advisory content derived from Red Hat RHSA-2024:9144, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: webkit2gtk3 security update

Description

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkit: visiting a malicious website may lead to address bar spoofing (CVE-2023-42843)

* webkit: heap use-after-free may lead to arbitrary code execution (CVE-2023-42950)

* webkit: processing malicious web content may lead to a denial of service (CVE-2023-42956)

* chromium-browser: Use after free in ANGLE (CVE-2024-4558)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.5 Release Notes linked from the References section.

Affected products

Rocky Linux 9 aarch64

Rocky Linux 9 ppc64le

Rocky Linux 9 s390x

Rocky Linux 9 x86_64

Fixes

2271717

2448778

2271719

2279689

2271718

CVEs

CVE-2023-42843

CVE-2023-42950

CVE-2023-42956

CVE-2023-43010

CVE-2024-4558

Affected packages

Rocky Linux 9 s390x - AppStream

webkit2gtk3-debugsource-0:2.46.1-2.el9_4.s390x.rpm

webkit2gtk3-0:2.46.1-2.el9_4.s390x.rpm

webkit2gtk3-jsc-0:2.46.1-2.el9_4.s390x.rpm

webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.s390x.rpm

webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.s390x.rpm

webkit2gtk3-0:2.46.1-2.el9_4.src.rpm

webkit2gtk3-devel-0:2.46.1-2.el9_4.s390x.rpm

webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.s390x.rpm

webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.s390x.rpm

webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

webkit2gtk3-0:2.46.1-2.el9_4.i686.rpm

webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.x86_64.rpm

webkit2gtk3-devel-0:2.46.1-2.el9_4.x86_64.rpm

webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.x86_64.rpm

webkit2gtk3-jsc-0:2.46.1-2.el9_4.x86_64.rpm

webkit2gtk3-devel-0:2.46.1-2.el9_4.i686.rpm

webkit2gtk3-debugsource-0:2.46.1-2.el9_4.x86_64.rpm

webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.x86_64.rpm

webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.x86_64.rpm

webkit2gtk3-0:2.46.1-2.el9_4.src.rpm

webkit2gtk3-jsc-0:2.46.1-2.el9_4.i686.rpm

webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.i686.rpm

webkit2gtk3-0:2.46.1-2.el9_4.x86_64.rpm

webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.x86_64.rpm

Rocky Linux 9 ppc64le - AppStream

webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.ppc64le.rpm

webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.ppc64le.rpm

webkit2gtk3-debugsource-0:2.46.1-2.el9_4.ppc64le.rpm

webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.ppc64le.rpm

webkit2gtk3-devel-0:2.46.1-2.el9_4.ppc64le.rpm

webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le.rpm

webkit2gtk3-0:2.46.1-2.el9_4.ppc64le.rpm

webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.ppc64le.rpm

webkit2gtk3-0:2.46.1-2.el9_4.src.rpm

webkit2gtk3-jsc-0:2.46.1-2.el9_4.ppc64le.rpm

Rocky Linux 9 aarch64 - AppStream

webkit2gtk3-debugsource-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-devel-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-jsc-debuginfo-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-devel-debuginfo-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-jsc-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-jsc-devel-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-jsc-devel-debuginfo-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-debuginfo-0:2.46.1-2.el9_4.aarch64.rpm

webkit2gtk3-0:2.46.1-2.el9_4.src.rpm