webkit2gtk3-2.46.5-1.el9_5

エラータID: AXSA:2025-9538:01

Release date: 
Tuesday, January 14, 2025 - 17:26
Subject: 
webkit2gtk3-2.46.5-1.el9_5
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.

Security Fix(es):

* WebKitGTK: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54479)
* webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54502)
* webkit: Processing maliciously crafted web content may lead to memory corruption (CVE-2024-54505)
* webkit: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-54508)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-54479
The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2024-54502
The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2024-54505
A type confusion issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.
CVE-2024-54508
The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.

Solution: 

Update packages.

CVEs: 
CVE-2024-54479
The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2024-54502
The issue was addressed with improved checks. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.
CVE-2024-54505
A type confusion issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.
CVE-2024-54508
The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Additional Info: 

N/A

Download: 

SRPMS
  1. webkit2gtk3-2.46.5-1.el9_5.src.rpm
    MD5: 8f9682d7365664464f8ca7ff9347d2f7
    SHA-256: 863b15f2bab34092beebd3798d32b5f4fe043bbfe947937934e9863d11e4fa72
    Size: 40.95 MB

Asianux Server 9 for x86_64
  1. webkit2gtk3-2.46.5-1.el9_5.i686.rpm
    MD5: 01282eea4520d5c22c882c7c83cf896a
    SHA-256: f14d4fc251316358e114748cfa47946eab00626e703a09c9618c74f0e2f2cee5
    Size: 29.92 MB
  2. webkit2gtk3-2.46.5-1.el9_5.x86_64.rpm
    MD5: 8adb4b8721dc0337e9515eca8f8a00b9
    SHA-256: 69f38e175f76f12a94150f39c10dd56f3c1e3321169465bf7e36bc7d09ac3cd5
    Size: 24.95 MB
  3. webkit2gtk3-devel-2.46.5-1.el9_5.i686.rpm
    MD5: 7146c5fe4c3ac1b16ba5fc1b0bf6294b
    SHA-256: 44b4ec80d49bc695096802bbdf50b1a58258d89ca1f90d1cae6671101463a061
    Size: 375.62 kB
  4. webkit2gtk3-devel-2.46.5-1.el9_5.x86_64.rpm
    MD5: 4abe9379a0a6e59b5e68a894483dc526
    SHA-256: b02d99cc88889e87e0895ad549ea7c9456668afc1543967c263d5a079a58b64c
    Size: 368.84 kB
  5. webkit2gtk3-jsc-2.46.5-1.el9_5.i686.rpm
    MD5: 8a58de220a568dfbd8a57aa562a52dae
    SHA-256: 9af9b6612b1a8bb22a55cd2af5f4d8eb31bd9efc450bcf3497c6826cb1796879
    Size: 4.18 MB
  6. webkit2gtk3-jsc-2.46.5-1.el9_5.x86_64.rpm
    MD5: 6473c21cafc1515d82aad819a3af2f81
    SHA-256: d72d1ae191ec24b631eea79cd4ebf43a756fce6a00ad7ee1607361ded14169c2
    Size: 4.43 MB
  7. webkit2gtk3-jsc-devel-2.46.5-1.el9_5.i686.rpm
    MD5: 1f255c7eb8844b242623f67b5e5f9e89
    SHA-256: efaee28134e672a6bb831cf96e6c4b2d5eef02d62d10bd8b0b8cdca0a9450e22
    Size: 184.61 kB
  8. webkit2gtk3-jsc-devel-2.46.5-1.el9_5.x86_64.rpm
    MD5: 027a7d955222097f9655d727f2aaf2f6
    SHA-256: 462e925556ba98816f230f3e3b6146381029f3e161842ad5e29c907743233a8a
    Size: 170.96 kB