This advisory covers four security vulnerabilities in the webkit2gtk3 package used in Red Hat Enterprise Linux 9.4 Extended Update Support. The vulnerabilities involve processing maliciously crafted web content that may cause unexpected process crashes (CVE-2024-54479, CVE-2024-54502, CVE-2024-54508) and memory corruption (CVE-2024-54505). These issues are related to improper handling of web content within the WebKitGTK engine, which could lead to denial of service or potentially more severe impacts due to memory corruption. Red Hat has issued updated packages to fix these vulnerabilities, and detailed remediation instructions are available in the linked Red Hat advisory.

The vulnerabilities can cause affected processes to crash unexpectedly, leading to denial of service conditions. The memory corruption vulnerability could potentially allow for more severe impacts, such as arbitrary code execution, although this is not explicitly stated in the advisory. The overall security impact is rated as Important by Red Hat, indicating a high severity level that warrants prompt attention but is not classified as critical. There are no known exploits in the wild at the time of this advisory.

Red Hat has released updated webkit2gtk3 packages for Red Hat Enterprise Linux 9.4 Extended Update Support that address these vulnerabilities. Users should apply these official updates as soon as possible to remediate the issues. Detailed instructions for applying the updates are available in the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated or required beyond applying the official patches.