[CLSA-2025:1767094035] webkit2gtk3: Fix of 7 CVEs
Type:
security
Severity:
Important
Release date:
2025-12-30 11:27:18 UTC
Description:
- Update to 2.50.4 to fix the following vulnerabilities: - CVE-2025-14174: fix memory corruption via improved validation of web content - CVE-2025-43501: fix buffer overflow with improved memory handling to prevent process crashes - CVE-2025-43529: fix use-after-free in memory management to prevent arbitrary code execution - CVE-2025-43531: fix race condition via improved state handling to prevent process crashes - CVE-2025-43535: fix unexpected process crash through improved memory handling - CVE-2025-43536: fix use-after-free with improved memory management for web content processing - CVE-2025-43541: fix type confusion via improved state handling to prevent unexpected crashes
Updated packages:
  • webkit2gtk3-2.50.4-1.el9_6.tuxcare.els1.i686.rpm
    sha:cf5d7c419f1063189980b7c1b38f5ce8e763fe0aa55987b4184f4bbb26cf8e88
  • webkit2gtk3-2.50.4-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:d5f9b5ffab4bcad2c19b3144ebc91648510e37f975faaf8d5876a87fbe11c373
  • webkit2gtk3-devel-2.50.4-1.el9_6.tuxcare.els1.i686.rpm
    sha:ae81e26312f4ebcaf4ddf09dd4357fe8bfadf05ba745b36893440a1f9696ca22
  • webkit2gtk3-devel-2.50.4-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:12959a592cf8c1b6c0061616dcc00dcc0072c5c605a2b1dccafd371fc8fcc09e
  • webkit2gtk3-jsc-2.50.4-1.el9_6.tuxcare.els1.i686.rpm
    sha:e41e9d5fc57651dd6d7b27d3bd23b2bcd17334cd488c6b56579128622259c789
  • webkit2gtk3-jsc-2.50.4-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:252a0c59c6578e818d1d58b419589aae64db52a2d86e70cefeb8a1fb06d75324
  • webkit2gtk3-jsc-devel-2.50.4-1.el9_6.tuxcare.els1.i686.rpm
    sha:bff37b0087281a10e422e81424db92cfc1b587953e9cfa7766fa1b9fb8f6b32a
  • webkit2gtk3-jsc-devel-2.50.4-1.el9_6.tuxcare.els1.x86_64.rpm
    sha:bcc8755d71796d8cd7b766899b07d304aaaef58c0ab6dbb1999050f4ef0c5443
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.