Red Hat Security Advisory

RHSA-2025:17643

webkit2gtk3 security update

Released 2025-10-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) webkit2gtk3-2.50.0-2.el9_0, webkit2gtk3-devel-2.50.0-2.el9_0, webkit2gtk3-jsc-2.50.0-2.el9_0 +1

TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119

TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20

TI-2025-28123 CVE-2025-43419 · GHSA-xvjg-xxqh-hg7q

MEDIUM 40

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00404 Published 2025-11-04 Partial fix · 26 CWE-119

TI-2025-22462 CVE-2025-31223 · GHSA-fppm-pf9p-6ph2

LOW 38

The issue was addressed with improved checks.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0059 Published 2025-05-12 Partial fix · 18.5, 15.5 +2 CWE-119

TI-2025-27980 CVE-2025-43272 · GHSA-5jpr-fhxv-v82h

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01079 Published 2025-09-15 Partial fix · 26 CWE-119

TI-2025-28062 CVE-2025-43356 · GHSA-pq66-4888-3qq9

LOW 30

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00671 Published 2025-09-15 Partial fix · 26, 18.7 CWE-200

TI-2025-28073 CVE-2025-43368 · GHSA-3cm9-h59j-r72g

LOW 22

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00806 Published 2025-09-15 Partial fix · 26 CWE-416