This advisory covers four security vulnerabilities in webkit2gtk3, the GTK port of the WebKit rendering engine, affecting Red Hat Enterprise Linux 8.6 variants. The vulnerabilities include unexpected process crashes (CVE-2024-54479, CVE-2024-54502, CVE-2024-54508) and memory corruption (CVE-2024-54505) triggered by processing maliciously crafted web content. The issues are rated with a security impact of Important by Red Hat. The advisory references fixes available in updated webkit2gtk3 packages for Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Telecommunications Update Service, and Advanced Mission Critical Update Support. No CVSS scores are provided in the advisory, and no known exploits in the wild have been reported.

Exploitation of these vulnerabilities may lead to denial of service through unexpected process crashes or potential memory corruption, which could affect the stability and security of applications using webkit2gtk3. The vulnerabilities do not have reported active exploitation but pose a risk if malicious web content is processed.

Red Hat has released updated webkit2gtk3 packages for Red Hat Enterprise Linux 8.6 variants that address these vulnerabilities. Users should apply the security update as described in the Red Hat advisory RHSA-2025:0277 and the referenced update article (https://access.redhat.com/articles/11258). Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated beyond applying the official update.