webkit2gtk3-2.46.3-2.el8_10.ML.1

エラータID: AXSA:2024-9047:06

Release date: 
Thursday, December 5, 2024 - 14:11
Subject: 
webkit2gtk3-2.46.3-2.el8_10.ML.1
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
High
Description: 

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* webkitgtk: data isolation bypass vulnerability (CVE-2024-44309)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-44309
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.

Solution: 

Update packages.

CVEs: 
CVE-2024-44309
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
Additional Info: 

N/A

Download: 

SRPMS
  1. webkit2gtk3-2.46.3-2.el8_10.ML.1.src.rpm
    MD5: 10b0b186397594118f27e38d534f9bbf
    SHA-256: d034e306008a61d26544dd5f765cfb6295b9eecf338957ad1e58a2edcbdebc1a
    Size: 40.89 MB

Asianux Server 8 for x86_64
  1. webkit2gtk3-2.46.3-2.el8_10.ML.1.i686.rpm
    MD5: 748cc0c9349803ffc2733fdb99935067
    SHA-256: 9d714547f43da501785d4b2966f78b4a3ebaa04222d770450148ba7dbc607c22
    Size: 30.66 MB
  2. webkit2gtk3-2.46.3-2.el8_10.ML.1.x86_64.rpm
    MD5: 81a460719e2d07365220c52c78fe7137
    SHA-256: 3fede8963d1ffc9b0ed544389bf2d2a741b320c4160599e776819508b569190f
    Size: 27.94 MB
  3. webkit2gtk3-devel-2.46.3-2.el8_10.ML.1.i686.rpm
    MD5: dcbd51a1ab49ae5371eabf99321d69ef
    SHA-256: 7551c691c7378aa17e65579d38d9eea1ca90ec4dc93c4949fe587db4878c724d
    Size: 310.01 kB
  4. webkit2gtk3-devel-2.46.3-2.el8_10.ML.1.x86_64.rpm
    MD5: 0f464d05bb707843a9bc8f820ff44678
    SHA-256: 4cdc1ce52768d692a25bed42459b60430bec28153c9ed136e7bea70aaf9c6b4c
    Size: 305.68 kB
  5. webkit2gtk3-jsc-2.46.3-2.el8_10.ML.1.i686.rpm
    MD5: ba67cb3b8abe0463e51d7c02c6d66518
    SHA-256: 20413bba7eb3067a287cb33bb455572415e5a8f01404fbf21443d882982517b4
    Size: 4.34 MB
  6. webkit2gtk3-jsc-2.46.3-2.el8_10.ML.1.x86_64.rpm
    MD5: b3a6381fbe1ec83b0cd5811788938366
    SHA-256: ec8585d40b3bf740c6fb375030b40fc0334ab80197b29261d176423c4c079e02
    Size: 4.53 MB
  7. webkit2gtk3-jsc-devel-2.46.3-2.el8_10.ML.1.i686.rpm
    MD5: 294f9d70442710196474427a3531202b
    SHA-256: e1716510a9a8d7971087e951cad33aad1c9670d521fe9c3e0fd48a5494b420f1
    Size: 177.91 kB
  8. webkit2gtk3-jsc-devel-2.46.3-2.el8_10.ML.1.x86_64.rpm
    MD5: 7f50cfe9558b2688d4be2ceedcd21e01
    SHA-256: 124ce3e0c8b1f05fece5bf13a79abf7aa1ecc43d4429a1f18f7197bfec9d11c5
    Size: 168.73 kB