{"schema_version":"1.7.2","id":"OESA-2024-2084","modified":"2024-08-30T11:09:01Z","published":"2024-08-30T11:09:01Z","upstream":["CVE-2024-40779","CVE-2024-40780","CVE-2024-4558"],"summary":"webkit2gtk3 security update","details":"WebKitGTK is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. This package contains WebKit2 based WebKitGTK+ for GTK+ 3.\r\n\r\nSecurity Fix(es):\r\n\r\nAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.(CVE-2024-40779)\r\n\r\nAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.(CVE-2024-40780)\r\n\r\nUse after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)(CVE-2024-4558)","affected":[{"package":{"ecosystem":"openEuler:20.03-LTS-SP4","name":"webkit2gtk3","purl":"pkg:rpm/openEuler/webkit2gtk3\u0026distro=openEuler-20.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.2-13.oe2003sp4"}]}],"ecosystem_specific":{"aarch64":["webkit2gtk3-debugsource-2.22.2-13.oe2003sp4.aarch64.rpm","webkit2gtk3-2.22.2-13.oe2003sp4.aarch64.rpm","webkit2gtk3-devel-2.22.2-13.oe2003sp4.aarch64.rpm","webkit2gtk3-debuginfo-2.22.2-13.oe2003sp4.aarch64.rpm","webkit2gtk3-jsc-devel-2.22.2-13.oe2003sp4.aarch64.rpm","webkit2gtk3-jsc-2.22.2-13.oe2003sp4.aarch64.rpm"],"noarch":["webkit2gtk3-help-2.22.2-13.oe2003sp4.noarch.rpm"],"src":["webkit2gtk3-2.22.2-13.oe2003sp4.src.rpm"],"x86_64":["webkit2gtk3-2.22.2-13.oe2003sp4.x86_64.rpm","webkit2gtk3-jsc-2.22.2-13.oe2003sp4.x86_64.rpm","webkit2gtk3-jsc-devel-2.22.2-13.oe2003sp4.x86_64.rpm","webkit2gtk3-debugsource-2.22.2-13.oe2003sp4.x86_64.rpm","webkit2gtk3-devel-2.22.2-13.oe2003sp4.x86_64.rpm","webkit2gtk3-debuginfo-2.22.2-13.oe2003sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:22.03-LTS-SP1","name":"webkit2gtk3","purl":"pkg:rpm/openEuler/webkit2gtk3\u0026distro=openEuler-22.03-LTS-SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.3-7.oe2203sp1"}]}],"ecosystem_specific":{"aarch64":["webkit2gtk3-debugsource-2.36.3-7.oe2203sp1.aarch64.rpm","webkit2gtk3-2.36.3-7.oe2203sp1.aarch64.rpm","webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp1.aarch64.rpm","webkit2gtk3-devel-2.36.3-7.oe2203sp1.aarch64.rpm","webkit2gtk3-debuginfo-2.36.3-7.oe2203sp1.aarch64.rpm","webkit2gtk3-jsc-2.36.3-7.oe2203sp1.aarch64.rpm"],"noarch":["webkit2gtk3-help-2.36.3-7.oe2203sp1.noarch.rpm"],"src":["webkit2gtk3-2.36.3-7.oe2203sp1.src.rpm"],"x86_64":["webkit2gtk3-2.36.3-7.oe2203sp1.x86_64.rpm","webkit2gtk3-debuginfo-2.36.3-7.oe2203sp1.x86_64.rpm","webkit2gtk3-devel-2.36.3-7.oe2203sp1.x86_64.rpm","webkit2gtk3-debugsource-2.36.3-7.oe2203sp1.x86_64.rpm","webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp1.x86_64.rpm","webkit2gtk3-jsc-2.36.3-7.oe2203sp1.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:22.03-LTS-SP3","name":"webkit2gtk3","purl":"pkg:rpm/openEuler/webkit2gtk3\u0026distro=openEuler-22.03-LTS-SP3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.3-7.oe2203sp3"}]}],"ecosystem_specific":{"aarch64":["webkit2gtk3-debugsource-2.36.3-7.oe2203sp3.aarch64.rpm","webkit2gtk3-2.36.3-7.oe2203sp3.aarch64.rpm","webkit2gtk3-debuginfo-2.36.3-7.oe2203sp3.aarch64.rpm","webkit2gtk3-jsc-2.36.3-7.oe2203sp3.aarch64.rpm","webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp3.aarch64.rpm","webkit2gtk3-devel-2.36.3-7.oe2203sp3.aarch64.rpm"],"noarch":["webkit2gtk3-help-2.36.3-7.oe2203sp3.noarch.rpm"],"src":["webkit2gtk3-2.36.3-7.oe2203sp3.src.rpm"],"x86_64":["webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp3.x86_64.rpm","webkit2gtk3-2.36.3-7.oe2203sp3.x86_64.rpm","webkit2gtk3-devel-2.36.3-7.oe2203sp3.x86_64.rpm","webkit2gtk3-debuginfo-2.36.3-7.oe2203sp3.x86_64.rpm","webkit2gtk3-jsc-2.36.3-7.oe2203sp3.x86_64.rpm","webkit2gtk3-debugsource-2.36.3-7.oe2203sp3.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:22.03-LTS-SP4","name":"webkit2gtk3","purl":"pkg:rpm/openEuler/webkit2gtk3\u0026distro=openEuler-22.03-LTS-SP4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.3-7.oe2203sp4"}]}],"ecosystem_specific":{"aarch64":["webkit2gtk3-debuginfo-2.36.3-7.oe2203sp4.aarch64.rpm","webkit2gtk3-2.36.3-7.oe2203sp4.aarch64.rpm","webkit2gtk3-debugsource-2.36.3-7.oe2203sp4.aarch64.rpm","webkit2gtk3-devel-2.36.3-7.oe2203sp4.aarch64.rpm","webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp4.aarch64.rpm","webkit2gtk3-jsc-2.36.3-7.oe2203sp4.aarch64.rpm"],"noarch":["webkit2gtk3-help-2.36.3-7.oe2203sp4.noarch.rpm"],"src":["webkit2gtk3-2.36.3-7.oe2203sp4.src.rpm"],"x86_64":["webkit2gtk3-2.36.3-7.oe2203sp4.x86_64.rpm","webkit2gtk3-jsc-2.36.3-7.oe2203sp4.x86_64.rpm","webkit2gtk3-devel-2.36.3-7.oe2203sp4.x86_64.rpm","webkit2gtk3-debugsource-2.36.3-7.oe2203sp4.x86_64.rpm","webkit2gtk3-debuginfo-2.36.3-7.oe2203sp4.x86_64.rpm","webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp4.x86_64.rpm"]}},{"package":{"ecosystem":"openEuler:24.03-LTS","name":"webkit2gtk3","purl":"pkg:rpm/openEuler/webkit2gtk3\u0026distro=openEuler-24.03-LTS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.38.2-9.oe2403"}]}],"ecosystem_specific":{"aarch64":["webkit2gtk3-jsc-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk5.0-debugsource-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk4.1-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk3-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk3-devel-2.38.2-9.oe2403.aarch64.rpm","jsc5.0-devel-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk4.1-debugsource-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk4.1-devel-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk3-debugsource-2.38.2-9.oe2403.aarch64.rpm","jsc4.1-devel-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk3-debuginfo-2.38.2-9.oe2403.aarch64.rpm","jsc5.0-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk5.0-debuginfo-2.38.2-9.oe2403.aarch64.rpm","jsc4.1-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk5.0-devel-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk5.0-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk3-jsc-devel-2.38.2-9.oe2403.aarch64.rpm","webkit2gtk4.1-debuginfo-2.38.2-9.oe2403.aarch64.rpm"],"noarch":["webkit2gtk3-help-2.38.2-9.oe2403.noarch.rpm","webkit2gtk5.0-help-2.38.2-9.oe2403.noarch.rpm","webkit2gtk4.1-help-2.38.2-9.oe2403.noarch.rpm"],"src":["webkit2gtk5.0-2.38.2-9.oe2403.src.rpm","webkit2gtk4.1-2.38.2-9.oe2403.src.rpm","webkit2gtk3-2.38.2-9.oe2403.src.rpm"],"x86_64":["webkit2gtk3-devel-2.38.2-9.oe2403.x86_64.rpm","jsc4.1-devel-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk4.1-devel-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk3-jsc-2.38.2-9.oe2403.x86_64.rpm","jsc4.1-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk3-debuginfo-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk3-debugsource-2.38.2-9.oe2403.x86_64.rpm","jsc5.0-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk3-2.38.2-9.oe2403.x86_64.rpm","jsc5.0-devel-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk4.1-debuginfo-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk4.1-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk3-jsc-devel-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk5.0-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk5.0-devel-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk4.1-debugsource-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk5.0-debugsource-2.38.2-9.oe2403.x86_64.rpm","webkit2gtk5.0-debuginfo-2.38.2-9.oe2403.x86_64.rpm"]}}],"references":[{"type":"ADVISORY","url":"https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-2084"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40779"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40780"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4558"}],"database_specific":{"severity":"High"}}