[CLSA-2025:1766568231] webkit2gtk3: Fix of CVE-2025-43392
Type:
security
Severity:
Moderate
Release date:
2025-12-24 20:08:01 UTC
Description:
- CVE-2025-43392: fix cross-origin image data leak by correctly tainting OffscreenCanvas when transferring a cross-origin ImageBitmap
Updated packages:
  • webkit2gtk3-2.50.1-1.el9.tuxcare.els5.x86_64.rpm
    sha:62c61ff4add0895ec7110606783a7e7fd1567330f1a6bafc2b4aef4c4bf86469
  • webkit2gtk3-devel-2.50.1-1.el9.tuxcare.els5.x86_64.rpm
    sha:7aed1c4b490a9afa57fc8a607d2e9df3947dcaeed6704cc87b9d9e7bb733a6a5
  • webkit2gtk3-jsc-2.50.1-1.el9.tuxcare.els5.x86_64.rpm
    sha:0b3f2bf17c7dbc4c840bbc6ab75e15bd475bebf5d57414f46f9277119ef8a020
  • webkit2gtk3-jsc-devel-2.50.1-1.el9.tuxcare.els5.x86_64.rpm
    sha:8ccde403dcf15183f95c01aa9dbd9186851ccd68e277e74514cc110837d2d472
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.