Red Hat Security Advisory

RHSA-2025:2125

webkit2gtk3 security update

Released 2025-03-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v.9.4) webkit2gtk3-2.46.6-1.el9_4, webkit2gtk3-devel-2.46.6-1.el9_4, webkit2gtk3-jsc-2.46.6-1.el9_4 +1

TI-2025-17906 CVE-2025-24150 · GHSA-qmjg-q5x7-48p2

MEDIUM 45

A privacy issue was addressed with improved handling of files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0294 Published 2025-01-27 Partial fix · 18.3, 15.3 CWE-77

TI-2024-36617 CVE-2024-54543 · GHSA-j23p-p7c9-5hm5

MEDIUM 41

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00801 Published 2025-01-27 Partial fix · 18.2, 17.7.6 +3 CWE-787

TI-2025-17918 CVE-2025-24162 · GHSA-7jj7-mxgf-79rv

LOW 39

This issue was addressed through improved state management.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0097 Published 2025-01-27 Partial fix · 18.3, 15.3 +2 CWE-125

TI-2025-17900 CVE-2025-24143 · GHSA-23h9-xj7q-3m7r

LOW 30

The issue was addressed with improved access restrictions to the file system.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00811 Published 2025-01-27 Partial fix · 18.3, 15.3 +1 CWE-862