Bug 2357909 (CVE-2024-54551)

Summary: CVE-2024-54551 webkitgtk: Processing web content may lead to a denial-of-service
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedKeywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in WebKitGTK. Processing malicious web content can cause a denial of service due to improper memory handling.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2357986, 2357987    
Bug Blocks:    

Description OSIDB Bzimport 2025-04-07 14:26:11 UTC
The issue was addressed with improved memory handling. This issue is fixed in watchOS 10.6, tvOS 17.6, Safari 17.6, macOS Sonoma 14.6, visionOS 1.3, iOS 17.6 and iPadOS 17.6. Processing web content may lead to a denial-of-service.

Comment 1 errata-xmlrpc 2025-04-08 20:51:00 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:3713 https://access.redhat.com/errata/RHSA-2025:3713

Comment 2 errata-xmlrpc 2025-04-09 13:07:23 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:3755 https://access.redhat.com/errata/RHSA-2025:3755

Comment 3 errata-xmlrpc 2025-04-09 13:11:14 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2025:3756 https://access.redhat.com/errata/RHSA-2025:3756

Comment 4 errata-xmlrpc 2025-04-17 06:44:49 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:3974 https://access.redhat.com/errata/RHSA-2025:3974