Red Hat Security Advisory

RHSA-2025:20922

webkit2gtk3 security update

Released 2025-11-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3-2.50.1-1.el9_7, webkit2gtk3-devel-2.50.1-1.el9_7, webkit2gtk3-jsc-2.50.1-1.el9_7 +1

TI-2025-28050 CVE-2025-43343 · GHSA-r357-mp92-7297

MEDIUM 50

The issue was addressed with improved memory handling.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2025-09-15 Partial fix · 26 CWE-119

TI-2025-28049 CVE-2025-43342 · GHSA-f8v5-f9hr-87fq

MEDIUM 50

A correctness issue was addressed with improved checks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2025-09-15 Partial fix · 26, 18.7 CWE-20

TI-2025-27980 CVE-2025-43272 · GHSA-5jpr-fhxv-v82h

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01079 Published 2025-09-15 Partial fix · 26 CWE-119

TI-2025-28062 CVE-2025-43356 · GHSA-pq66-4888-3qq9

LOW 30

The issue was addressed with improved handling of caches.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00671 Published 2025-09-15 Partial fix · 26, 18.7 CWE-200

TI-2025-28073 CVE-2025-43368 · GHSA-3cm9-h59j-r72g

LOW 22

A use-after-free issue was addressed with improved memory management.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00806 Published 2025-09-15 Partial fix · 26 CWE-416