RHSA-2023:4497: CVEs fixed (Red Hat)

RHSA-2023:4497 fixes 3 tracked CVEs. Affected systems and fixed versions.

CVE-2023-4045 MEDIUM 5.3 UPGRADE MITIGATE Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data
CVE-2023-4050 HIGH 7.5 UPGRADE MITIGATE In some cases, an untrusted input stream was copied to a stack buffer without checking its size
CVE-2023-4049 MEDIUM 5.9 UPGRADE MITIGATE Race conditions in reference counting code were found through code inspection

Applies to