An update for webkit2gtk3 is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4 and openEuler-24.03-LTS Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2024-2084 Final 1.0 1.0 2024-08-30 Initial 2024-08-30 2024-08-30 openEuler SA Tool V1.0 2024-08-30 webkit2gtk3 security update An update for webkit2gtk3 is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4 and openEuler-24.03-LTS. WebKitGTK is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. This package contains WebKit2 based WebKitGTK+ for GTK+ 3. Security Fix(es): An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.(CVE-2024-40779) An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.(CVE-2024-40780) Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)(CVE-2024-4558) An update for webkit2gtk3 is now available for openEuler-20.03-LTS-SP4,openEuler-22.03-LTS-SP1,openEuler-22.03-LTS-SP3,openEuler-22.03-LTS-SP4 and openEuler-24.03-LTS. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High webkit2gtk3 https://www.openeuler.org/en/security/security-bulletins/detail?id=openEuler-SA-2024-2084 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40779 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40780 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-4558 https://nvd.nist.gov/vuln/detail/CVE-2024-40779 https://nvd.nist.gov/vuln/detail/CVE-2024-40780 https://nvd.nist.gov/vuln/detail/CVE-2024-4558 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS webkit2gtk3-debugsource-2.22.2-13.oe2003sp4.aarch64.rpm webkit2gtk3-2.22.2-13.oe2003sp4.aarch64.rpm webkit2gtk3-devel-2.22.2-13.oe2003sp4.aarch64.rpm webkit2gtk3-debuginfo-2.22.2-13.oe2003sp4.aarch64.rpm webkit2gtk3-jsc-devel-2.22.2-13.oe2003sp4.aarch64.rpm webkit2gtk3-jsc-2.22.2-13.oe2003sp4.aarch64.rpm webkit2gtk3-debugsource-2.36.3-7.oe2203sp1.aarch64.rpm webkit2gtk3-2.36.3-7.oe2203sp1.aarch64.rpm webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp1.aarch64.rpm webkit2gtk3-devel-2.36.3-7.oe2203sp1.aarch64.rpm webkit2gtk3-debuginfo-2.36.3-7.oe2203sp1.aarch64.rpm webkit2gtk3-jsc-2.36.3-7.oe2203sp1.aarch64.rpm webkit2gtk3-debugsource-2.36.3-7.oe2203sp3.aarch64.rpm webkit2gtk3-2.36.3-7.oe2203sp3.aarch64.rpm webkit2gtk3-debuginfo-2.36.3-7.oe2203sp3.aarch64.rpm webkit2gtk3-jsc-2.36.3-7.oe2203sp3.aarch64.rpm webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp3.aarch64.rpm webkit2gtk3-devel-2.36.3-7.oe2203sp3.aarch64.rpm webkit2gtk3-debuginfo-2.36.3-7.oe2203sp4.aarch64.rpm webkit2gtk3-2.36.3-7.oe2203sp4.aarch64.rpm webkit2gtk3-debugsource-2.36.3-7.oe2203sp4.aarch64.rpm webkit2gtk3-devel-2.36.3-7.oe2203sp4.aarch64.rpm webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp4.aarch64.rpm webkit2gtk3-jsc-2.36.3-7.oe2203sp4.aarch64.rpm webkit2gtk3-jsc-2.38.2-9.oe2403.aarch64.rpm webkit2gtk5.0-debugsource-2.38.2-9.oe2403.aarch64.rpm webkit2gtk4.1-2.38.2-9.oe2403.aarch64.rpm webkit2gtk3-2.38.2-9.oe2403.aarch64.rpm webkit2gtk3-devel-2.38.2-9.oe2403.aarch64.rpm jsc5.0-devel-2.38.2-9.oe2403.aarch64.rpm webkit2gtk4.1-debugsource-2.38.2-9.oe2403.aarch64.rpm webkit2gtk4.1-devel-2.38.2-9.oe2403.aarch64.rpm webkit2gtk3-debugsource-2.38.2-9.oe2403.aarch64.rpm jsc4.1-devel-2.38.2-9.oe2403.aarch64.rpm webkit2gtk3-debuginfo-2.38.2-9.oe2403.aarch64.rpm jsc5.0-2.38.2-9.oe2403.aarch64.rpm webkit2gtk5.0-debuginfo-2.38.2-9.oe2403.aarch64.rpm jsc4.1-2.38.2-9.oe2403.aarch64.rpm webkit2gtk5.0-devel-2.38.2-9.oe2403.aarch64.rpm webkit2gtk5.0-2.38.2-9.oe2403.aarch64.rpm webkit2gtk3-jsc-devel-2.38.2-9.oe2403.aarch64.rpm webkit2gtk4.1-debuginfo-2.38.2-9.oe2403.aarch64.rpm webkit2gtk3-help-2.22.2-13.oe2003sp4.noarch.rpm webkit2gtk3-help-2.36.3-7.oe2203sp1.noarch.rpm webkit2gtk3-help-2.36.3-7.oe2203sp3.noarch.rpm webkit2gtk3-help-2.36.3-7.oe2203sp4.noarch.rpm webkit2gtk3-help-2.38.2-9.oe2403.noarch.rpm webkit2gtk5.0-help-2.38.2-9.oe2403.noarch.rpm webkit2gtk4.1-help-2.38.2-9.oe2403.noarch.rpm webkit2gtk3-2.22.2-13.oe2003sp4.src.rpm webkit2gtk3-2.36.3-7.oe2203sp1.src.rpm webkit2gtk3-2.36.3-7.oe2203sp3.src.rpm webkit2gtk3-2.36.3-7.oe2203sp4.src.rpm webkit2gtk5.0-2.38.2-9.oe2403.src.rpm webkit2gtk4.1-2.38.2-9.oe2403.src.rpm webkit2gtk3-2.38.2-9.oe2403.src.rpm webkit2gtk3-2.22.2-13.oe2003sp4.x86_64.rpm webkit2gtk3-jsc-2.22.2-13.oe2003sp4.x86_64.rpm webkit2gtk3-jsc-devel-2.22.2-13.oe2003sp4.x86_64.rpm webkit2gtk3-debugsource-2.22.2-13.oe2003sp4.x86_64.rpm webkit2gtk3-devel-2.22.2-13.oe2003sp4.x86_64.rpm webkit2gtk3-debuginfo-2.22.2-13.oe2003sp4.x86_64.rpm webkit2gtk3-2.36.3-7.oe2203sp1.x86_64.rpm webkit2gtk3-debuginfo-2.36.3-7.oe2203sp1.x86_64.rpm webkit2gtk3-devel-2.36.3-7.oe2203sp1.x86_64.rpm webkit2gtk3-debugsource-2.36.3-7.oe2203sp1.x86_64.rpm webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp1.x86_64.rpm webkit2gtk3-jsc-2.36.3-7.oe2203sp1.x86_64.rpm webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp3.x86_64.rpm webkit2gtk3-2.36.3-7.oe2203sp3.x86_64.rpm webkit2gtk3-devel-2.36.3-7.oe2203sp3.x86_64.rpm webkit2gtk3-debuginfo-2.36.3-7.oe2203sp3.x86_64.rpm webkit2gtk3-jsc-2.36.3-7.oe2203sp3.x86_64.rpm webkit2gtk3-debugsource-2.36.3-7.oe2203sp3.x86_64.rpm webkit2gtk3-2.36.3-7.oe2203sp4.x86_64.rpm webkit2gtk3-jsc-2.36.3-7.oe2203sp4.x86_64.rpm webkit2gtk3-devel-2.36.3-7.oe2203sp4.x86_64.rpm webkit2gtk3-debugsource-2.36.3-7.oe2203sp4.x86_64.rpm webkit2gtk3-debuginfo-2.36.3-7.oe2203sp4.x86_64.rpm webkit2gtk3-jsc-devel-2.36.3-7.oe2203sp4.x86_64.rpm webkit2gtk3-devel-2.38.2-9.oe2403.x86_64.rpm jsc4.1-devel-2.38.2-9.oe2403.x86_64.rpm webkit2gtk4.1-devel-2.38.2-9.oe2403.x86_64.rpm webkit2gtk3-jsc-2.38.2-9.oe2403.x86_64.rpm jsc4.1-2.38.2-9.oe2403.x86_64.rpm webkit2gtk3-debuginfo-2.38.2-9.oe2403.x86_64.rpm webkit2gtk3-debugsource-2.38.2-9.oe2403.x86_64.rpm jsc5.0-2.38.2-9.oe2403.x86_64.rpm webkit2gtk3-2.38.2-9.oe2403.x86_64.rpm jsc5.0-devel-2.38.2-9.oe2403.x86_64.rpm webkit2gtk4.1-debuginfo-2.38.2-9.oe2403.x86_64.rpm webkit2gtk4.1-2.38.2-9.oe2403.x86_64.rpm webkit2gtk3-jsc-devel-2.38.2-9.oe2403.x86_64.rpm webkit2gtk5.0-2.38.2-9.oe2403.x86_64.rpm webkit2gtk5.0-devel-2.38.2-9.oe2403.x86_64.rpm webkit2gtk4.1-debugsource-2.38.2-9.oe2403.x86_64.rpm webkit2gtk5.0-debugsource-2.38.2-9.oe2403.x86_64.rpm webkit2gtk5.0-debuginfo-2.38.2-9.oe2403.x86_64.rpm An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash. 2024-08-30 CVE-2024-40779 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS Medium 5.5 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H webkit2gtk3 security update 2024-08-30 https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2084 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash. 2024-08-30 CVE-2024-40780 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS Medium 5.5 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H webkit2gtk3 security update 2024-08-30 https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2084 Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) 2024-08-30 CVE-2024-4558 openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP1 openEuler-22.03-LTS-SP3 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS High 7.5 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H webkit2gtk3 security update 2024-08-30 https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2084